Skip to content
OpenAdvisories

Vendor

Aopen

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.4

    Insecure Platform Key (PK) used in UEFI system firmware signature

    A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key (PK). An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affe…