VAR-200212-0126

Vulnerability from variot - Updated: 2025-04-03 22:40

BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key. The D845 series motherboards are a product of Intel. These motherboards are designed to support the Pentium 4 processor. When a system using a D845 series motherboard is booted, it is possible to halt the boot to change the boot media, even if a BIOS password is set. By pressing the F8 key, the D845 BIOS will give a user at the console a menu. From this menu, a user may specify a different media than the default from which the system is to be booted. Any password set on the BIOS will be circumvented by this procedure. Through this process, a local attacker can bypass the Password protected and successfully booted

Show details on source website
To clipboard 

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-200212-0126",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "d845bg motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p02-0015"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p04-0018"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p06-0024"
      },
      {
        "model": "d845bg motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p04-0023"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p08-0031"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p07-0029"
      },
      {
        "model": "d845bg motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p05-0024"
      },
      {
        "model": "d845bg motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p01-0012"
      },
      {
        "model": "d845bg motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p03-0021"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "intel",
        "version": "p05-0022"
      },
      {
        "model": "d845pt motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p03-0021"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p04-0018"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p06-0024"
      },
      {
        "model": "d845pt motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p05-0024"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p08-0031"
      },
      {
        "model": "d845pt motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p02-0015"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p11-0040"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p09-0035"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p11-0040"
      },
      {
        "model": "d845pt motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p04-0023"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p09-0035"
      },
      {
        "model": "d845hv motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p10-0038"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p07-0029"
      },
      {
        "model": "d845wn motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p10-0038"
      },
      {
        "model": "d845pt motherboard",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "intel",
        "version": "p01-0012"
      },
      {
        "model": "d845wn motherboard p11-0040",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p10-0038",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p09-0035",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p08-0031",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p07-0029",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p06-0024",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p05-0022",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845wn motherboard p04-0018",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845pt motherboard p05-0024",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845pt motherboard p04-0023",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845pt motherboard p03-0021",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845pt motherboard p02-0015",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845pt motherboard p01-0012",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p11-0040",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p10-0038",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p09-0035",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p08-0031",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p07-0029",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p06-0024",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p05-0022",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845hv motherboard p04-0018",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845bg motherboard p05-0024",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845bg motherboard p04-0023",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845bg motherboard p03-0021",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845bg motherboard p02-0015",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      },
      {
        "model": "d845bg motherboard p01-0012",
        "scope": null,
        "trust": 0.3,
        "vendor": "intel",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "BID",
        "id": "4610"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Dave Oliver\u203b bugtraq@daveo.co.uk",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      }
    ],
    "trust": 0.6
  },
  "cve": "CVE-2002-2059",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "nvd@nist.gov",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "CVE-2002-2059",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 1.0,
            "vectorString": "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "version": "2.0"
          },
          {
            "accessComplexity": "LOW",
            "accessVector": "LOCAL",
            "authentication": "NONE",
            "author": "VULHUB",
            "availabilityImpact": "PARTIAL",
            "baseScore": 4.6,
            "confidentialityImpact": "PARTIAL",
            "exploitabilityScore": 3.9,
            "id": "VHN-6442",
            "impactScore": 6.4,
            "integrityImpact": "PARTIAL",
            "severity": "MEDIUM",
            "trust": 0.1,
            "vectorString": "AV:L/AC:L/AU:N/C:P/I:P/A:P",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "nvd@nist.gov",
            "id": "CVE-2002-2059",
            "trust": 1.0,
            "value": "MEDIUM"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-200212-591",
            "trust": 0.6,
            "value": "MEDIUM"
          },
          {
            "author": "VULHUB",
            "id": "VHN-6442",
            "trust": 0.1,
            "value": "MEDIUM"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-6442"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key. The D845 series motherboards are a product of Intel.  These motherboards are designed to support the Pentium 4 processor. \nWhen a system using a D845 series motherboard is booted, it is possible to halt the boot to change the boot media, even if a BIOS password is set.  By pressing the F8 key, the D845 BIOS will give a user at the console a menu.  From this menu, a user may specify a different media than the default from which the system is to be booted.  Any password set on the BIOS will be circumvented by this procedure. Through this process, a local attacker can bypass the Password protected and successfully booted",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      },
      {
        "db": "BID",
        "id": "4610"
      },
      {
        "db": "VULHUB",
        "id": "VHN-6442"
      }
    ],
    "trust": 1.26
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "BID",
        "id": "4610",
        "trust": 2.0
      },
      {
        "db": "NVD",
        "id": "CVE-2002-2059",
        "trust": 1.7
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591",
        "trust": 0.7
      },
      {
        "db": "XF",
        "id": "845",
        "trust": 0.6
      },
      {
        "db": "BUGTRAQ",
        "id": "20020425 INTEL D845HV/WN/PT SERIES MOTHERBOARD VULNERABILITY",
        "trust": 0.6
      },
      {
        "db": "BUGTRAQ",
        "id": "20020503 RE: INTEL D845HV/WN/PT SERIES MOTHERBOARD VULNERABILITY",
        "trust": 0.6
      },
      {
        "db": "NSFOCUS",
        "id": "2677",
        "trust": 0.6
      },
      {
        "db": "VULHUB",
        "id": "VHN-6442",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-6442"
      },
      {
        "db": "BID",
        "id": "4610"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "id": "VAR-200212-0126",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-6442"
      }
    ],
    "trust": 0.01
  },
  "last_update_date": "2025-04-03T22:40:44.336000Z",
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "NVD-CWE-Other",
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.7,
        "url": "http://www.securityfocus.com/bid/4610"
      },
      {
        "trust": 1.7,
        "url": "http://archives.neohapsis.com/archives/bugtraq/2002-04/0356.html"
      },
      {
        "trust": 1.7,
        "url": "http://archives.neohapsis.com/archives/bugtraq/2002-05/0017.html"
      },
      {
        "trust": 1.7,
        "url": "http://www.iss.net/security_center/static/8998.php"
      },
      {
        "trust": 1.1,
        "url": "ftp://download.intel.com/design/motherbd/bg/p06-0027.pdf"
      },
      {
        "trust": 1.1,
        "url": "ftp://download.intel.com/design/motherbd/hv/p12-0041d.pdf"
      },
      {
        "trust": 1.1,
        "url": "ftp://download.intel.com/design/motherbd/pt/p06-0027.pdf"
      },
      {
        "trust": 1.1,
        "url": "ftp://download.intel.com/design/motherbd/wn/p12-0041d.pdf"
      },
      {
        "trust": 0.6,
        "url": "http://www.nsfocus.net/vulndb/2677"
      }
    ],
    "sources": [
      {
        "db": "VULHUB",
        "id": "VHN-6442"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "VULHUB",
        "id": "VHN-6442"
      },
      {
        "db": "BID",
        "id": "4610"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2002-12-31T00:00:00",
        "db": "VULHUB",
        "id": "VHN-6442"
      },
      {
        "date": "2002-04-26T00:00:00",
        "db": "BID",
        "id": "4610"
      },
      {
        "date": "2002-04-26T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "date": "2002-12-31T05:00:00",
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2008-09-05T00:00:00",
        "db": "VULHUB",
        "id": "VHN-6442"
      },
      {
        "date": "2002-04-26T00:00:00",
        "db": "BID",
        "id": "4610"
      },
      {
        "date": "2006-08-09T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      },
      {
        "date": "2025-04-03T01:03:51.193000",
        "db": "NVD",
        "id": "CVE-2002-2059"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "local",
    "sources": [
      {
        "db": "BID",
        "id": "4610"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      }
    ],
    "trust": 0.9
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Intel D845 Motherboard BIOS Serial Any Media Boot Vulnerability",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      }
    ],
    "trust": 0.6
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Configuration Error",
    "sources": [
      {
        "db": "BID",
        "id": "4610"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-200212-591"
      }
    ],
    "trust": 0.9
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.