CVE-2017-9457

Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS.

• CWE-20

• http://packetstormsecurity.com/files/143481/Compulab-Intense-PC-MintBox-2-Signature-Verification.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Jul/56Mailing List, Third Party Advisory
• https://watchmysys.com/blog/2017/07/cve-2017-9457-compulab-intense-pc-lacks-firmware-validation/Third Party Advisory
• http://packetstormsecurity.com/files/143481/Compulab-Intense-PC-MintBox-2-Signature-Verification.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Jul/56Mailing List, Third Party Advisory
• https://watchmysys.com/blog/2017/07/cve-2017-9457-compulab-intense-pc-lacks-firmware-validation/Third Party Advisory

Published

Jul 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-9449SQL injection vulnerability in BigTree CMS through 4.2.18 al…
• CVE-2017-9450The Amazon Web Services (AWS) CloudFormation bootstrap tools…
• CVE-2017-9451Cross site scripting (XSS) vulnerability in pages.edit_form.…
• CVE-2017-9452Cross-site scripting (XSS) vulnerability in admin.php in Piw…
• CVE-2017-9453BMC Server Automation before 8.9.01 patch 1 allows Process S…9.8
• CVE-2017-9454Buffer overflow in the ares_parse_a_reply function in the em…7.5
• CVE-2017-9458XML external entity (XXE) vulnerability in the GlobalProtect…
• CVE-2017-9459Cross-site scripting (XSS) vulnerability in the management w…
• CVE-2017-9461smbd in Samba before 4.4.10 and 4.5.x before 4.5.6 has a den…
• CVE-2017-9462In Mercurial before 4.1.3, "hg serve --stdio" allows remote …8.8
• CVE-2017-9463The application Piwigo is affected by a SQL injection vulner…
• CVE-2017-9464An open redirect vulnerability is present in Piwigo 2.9 and …