CVE-2009-5151 - CVE House
Back to Database
Status published Medium CVE-2009-5151

The stub component of Absolute Computrace Agent V70.785 executes code...

Vulnerability Description

The stub component of Absolute Computrace Agent V70.785 executes code from a disk's inter-partition space without requiring a digital signature for that code, which allows attackers to execute code on the BIOS. This allows a privileged local user to achieve persistent control of BIOS behavior, independent of later disk changes.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-5151

Credits & Attribution

No credits recorded in the NVD database.

References

More from absolute

View All →
CVE-2018-16715
An issue was discovered in Absolute Software CTES Windows Agent...
High 8.8
CVE-2009-5152
Absolute Computrace Agent, as distributed on certain Dell Inspiron systems...
Medium 4.1
CVE-2009-5150
Absolute Computrace Agent V80.845 and V80.866 does not have a...
Medium 6.7

Affected Vendor

Affected Software

computrace agent
Vulnerable Versions:
70.785

Timeline

Official Publish: May 11th, 2018
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.