Microsoft Surface Pro 3 Security Feature Bypass Vulnerability Surface

    Microsoft Surface Pro 3 Security Feature Bypass Vulnerability

    Microsoft Surface Pro 3 Security Feature Bypass Vulnerability

    CVE-2021-42299
    Category: Surface
    Exploitability

    The following table provides an exploitability assessment for this vulnerability at the time of original publication.
    Publicly Disclosed Exploited Exploitability Assessment
    No No Exploitation Less Likely

    FAQ

    Which Surface devices are affected by this vulnerability?
    The Surface Pro 3.

    Are any other devices vulnerable?
    Microsoft has confirmed that the Surface Pro 3 is vulnerable. However, it is possible that other devices, including non-Microsoft devices, using a similar BIOS may also be vulnerable.

    The Surface Pro 4, Surface Book, and more recent Surface devices are not vulnerable.

    What can an attacker do with this vulnerability?
    Devices use Platform Configuration Registers (PCRs) to record information about device and software configuration to ensure that the boot process is secure. Windows uses these PCR measurements to determine device health.

    A vulnerable device can masquerade as a healthy device by extending arbitrary values into Platform Configuration Register (PCR) banks.

    How do I protect myself?
    This technique requires physical access to a target victimís device, or an attacker would already have had to compromise a legitimate user's credentials. We encourage customers to practice good security habits, including positive control over their device and preventing unauthorized physical access to their machine.

    Access to corporate resources is gated by user credentials, please see the following resources for more information:


    Microsoft has attempted to notify all affected vendors.


    Read more: https://msrc.microsoft.com/update-gu...CVE-2021-42299
    Brink's Avatar Posted By:


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 15:57.
Find Us




Windows 10 Forums