CVE-2017-8083

Severity: medium (CVSS 6.7 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-06-06 · updated 2026-06-17
Weakness: CWE-862

Description

CompuLab Intense PC and MintBox 2 devices with BIOS before 2017-05-21 do not use the CloseMnf protection mechanism for write protection of flash memory regions, which allows local users to install a firmware rootkit by leveraging administrative privileges.

Affected products

Compulab Intense Pc Firmware: through cr_2.2.0.400.2
Compulab Mintbox 2 Firmware: through cr_2.2.0.400.2

References

http://seclists.org/fulldisclosure/2017/Jun/6
https://watchmysys.com/blog/2017/06/cve-2017-8083-compulab-intensepc-lacks-bios-wp/
http://seclists.org/fulldisclosure/2017/Jun/6
https://watchmysys.com/blog/2017/06/cve-2017-8083-compulab-intensepc-lacks-bios-wp/

Get alerted when CVE-2017-8083 or the next vulnerability affects your stack