← back
CVE-2020-10278mediumCWE-284

RVD#2561: Unprotected BIOS allows user to boot from live OS image.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.1epss 1.0%
exploitation probability
1.0%top 42% of all CVEs
observed exploitation
nono source reports it
The BIOS onboard MiR's Computer is not protected by password, therefore, it allows a Bad Operator to modify settings such as boot order. This can be leveraged by a Malicious operator to boot from a Live Image.
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:H