BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict…
Priority LOW 22Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
BIOS D845BG, D845HV, D845PT and D845WN on Intel motherboards does not properly restrict access to configuration information when BIOS passwords are enabled, which could allow local users to change the default boot device via the F8 key.
Why it matters now
EPSS 0.0045 39th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 25
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:d845bg_motherboard:p01-0012:*:*:*:*:*:*:* | p01-0012 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845bg_motherboard:p02-0015:*:*:*:*:*:*:* | p02-0015 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845bg_motherboard:p03-0021:*:*:*:*:*:*:* | p03-0021 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845bg_motherboard:p04-0023:*:*:*:*:*:*:* | p04-0023 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845bg_motherboard:p05-0024:*:*:*:*:*:*:* | p05-0024 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p04-0018:*:*:*:*:*:*:* | p04-0018 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p05-0022:*:*:*:*:*:*:* | p05-0022 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p06-0024:*:*:*:*:*:*:* | p06-0024 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p07-0029:*:*:*:*:*:*:* | p07-0029 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p08-0031:*:*:*:*:*:*:* | p08-0031 | Vulnerable | Intel |
- cpe:2.3:h:intel:d845bg_motherboard:p01-0012:*:*:*:*:*:*:* Versions p01-0012 Vulnerable ·Intel
- cpe:2.3:h:intel:d845bg_motherboard:p02-0015:*:*:*:*:*:*:* Versions p02-0015 Vulnerable ·Intel
- cpe:2.3:h:intel:d845bg_motherboard:p03-0021:*:*:*:*:*:*:* Versions p03-0021 Vulnerable ·Intel
- cpe:2.3:h:intel:d845bg_motherboard:p04-0023:*:*:*:*:*:*:* Versions p04-0023 Vulnerable ·Intel
- cpe:2.3:h:intel:d845bg_motherboard:p05-0024:*:*:*:*:*:*:* Versions p05-0024 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p04-0018:*:*:*:*:*:*:* Versions p04-0018 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p05-0022:*:*:*:*:*:*:* Versions p05-0022 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p06-0024:*:*:*:*:*:*:* Versions p06-0024 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p07-0029:*:*:*:*:*:*:* Versions p07-0029 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p08-0031:*:*:*:*:*:*:* Versions p08-0031 Vulnerable ·Intel
Show 15 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:d845hv_motherboard:p09-0035:*:*:*:*:*:*:* | p09-0035 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p10-0038:*:*:*:*:*:*:* | p10-0038 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845hv_motherboard:p11-0040:*:*:*:*:*:*:* | p11-0040 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845pt_motherboard:p01-0012:*:*:*:*:*:*:* | p01-0012 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845pt_motherboard:p02-0015:*:*:*:*:*:*:* | p02-0015 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845pt_motherboard:p03-0021:*:*:*:*:*:*:* | p03-0021 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845pt_motherboard:p04-0023:*:*:*:*:*:*:* | p04-0023 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845pt_motherboard:p05-0024:*:*:*:*:*:*:* | p05-0024 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p04-0018:*:*:*:*:*:*:* | p04-0018 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p06-0024:*:*:*:*:*:*:* | p06-0024 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p07-0029:*:*:*:*:*:*:* | p07-0029 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p08-0031:*:*:*:*:*:*:* | p08-0031 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p09-0035:*:*:*:*:*:*:* | p09-0035 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p10-0038:*:*:*:*:*:*:* | p10-0038 | Vulnerable | Intel |
| cpe:2.3:h:intel:d845wn_motherboard:p11-0040:*:*:*:*:*:*:* | p11-0040 | Vulnerable | Intel |
- cpe:2.3:h:intel:d845hv_motherboard:p09-0035:*:*:*:*:*:*:* Versions p09-0035 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p10-0038:*:*:*:*:*:*:* Versions p10-0038 Vulnerable ·Intel
- cpe:2.3:h:intel:d845hv_motherboard:p11-0040:*:*:*:*:*:*:* Versions p11-0040 Vulnerable ·Intel
- cpe:2.3:h:intel:d845pt_motherboard:p01-0012:*:*:*:*:*:*:* Versions p01-0012 Vulnerable ·Intel
- cpe:2.3:h:intel:d845pt_motherboard:p02-0015:*:*:*:*:*:*:* Versions p02-0015 Vulnerable ·Intel
- cpe:2.3:h:intel:d845pt_motherboard:p03-0021:*:*:*:*:*:*:* Versions p03-0021 Vulnerable ·Intel
- cpe:2.3:h:intel:d845pt_motherboard:p04-0023:*:*:*:*:*:*:* Versions p04-0023 Vulnerable ·Intel
- cpe:2.3:h:intel:d845pt_motherboard:p05-0024:*:*:*:*:*:*:* Versions p05-0024 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p04-0018:*:*:*:*:*:*:* Versions p04-0018 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p06-0024:*:*:*:*:*:*:* Versions p06-0024 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p07-0029:*:*:*:*:*:*:* Versions p07-0029 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p08-0031:*:*:*:*:*:*:* Versions p08-0031 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p09-0035:*:*:*:*:*:*:* Versions p09-0035 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p10-0038:*:*:*:*:*:*:* Versions p10-0038 Vulnerable ·Intel
- cpe:2.3:h:intel:d845wn_motherboard:p11-0040:*:*:*:*:*:*:* Versions p11-0040 Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2002-2059
- 2026-10-03 Alias added: GHSA-rhp3-rf73-5hpc
References
Sources
- CVE-2002-2059 · CVE Program
- CVE-2002-2059 · NVD
- FIRST EPSS
- GHSA-rhp3-rf73-5hpc · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences