CVE-2015-6856

ALTO 7.8CVE-2015-6856 · Published 08/01/2016 · updated 17/06/2026

In breve

CVE-2015-6856 è una vulnerabilità ALTO (CVSS 7.8) che riguarda pre-boot authentication driver (dell).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.52%, superiore al 44.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
pre-boot authentication driver dell	`= 1.0.1.5`	No fix yet

Description

Dell Pre-Boot Authentication Driver (PBADRV.sys) 1.0.1.5 allows local users to write to arbitrary physical memory locations and gain privileges via a 0x0022201c IOCTL call.

References

packetstormsecurity.com/files/134987/Dell-Authentication-Driver-Uncontrolled-Write.html · Exploit
seclists.org/fulldisclosure/2015/Dec/81 · Exploit
securityfocus.com/archive/1/537161/100/0/threaded
securityfocus.com/bid/79643
korelogic.com/Resources/Advisories/KL-001-2015-008.txt · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free