Vendor
Aopen
1 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 6.4
Insecure Platform Key (PK) used in UEFI system firmware signature
A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affe…