CVE-2015-0949

7.8 highEPSS 0.4%

The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Boot protection mechanism and gain privileges by leveraging write access to physical memory.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-269
Published: 2020-01-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:latitude_e6430_firmware
hp:elitebook_850_g1_firmware

References

http://www.kb.cert.org/vuls/id/631788
http://www.kb.cert.org/vuls/id/631788

Check your stack JSON