Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB…
Priority LOW 30CWE-264Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.
Summary
Intel Desktop and Intel Mobile Boards with BIOS firmware DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL, MGM965TW, D945GCPE, and DX38BT allows local administrators with ring 0 privileges to gain additional privileges and modify code that is running in System Management Mode, or access hypervisory memory as demonstrated at Black Hat 2008 by accessing certain remapping registers in Xen 3.3.
Why it matters now
EPSS 0.00322 25th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 8
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:intel:bios:dg33bu:*:*:*:*:*:*:* | dg33bu | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:dg33fb:*:*:*:*:*:*:* | dg33fb | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:dg33tl:*:*:*:*:*:*:* | dg33tl | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:dp35dp:*:*:*:*:*:*:* | dp35dp | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:dq35jo:*:*:*:*:*:*:* | dq35jo | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:dq35mp:*:*:*:*:*:*:* | dq35mp | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:dx38bt:*:*:*:*:*:*:* | dx38bt | Vulnerable | Intel |
| cpe:2.3:h:intel:bios:mgm965tw:*:*:*:*:*:*:* | mgm965tw | Vulnerable | Intel |
- cpe:2.3:h:intel:bios:dg33bu:*:*:*:*:*:*:* Versions dg33bu Vulnerable ·Intel
- cpe:2.3:h:intel:bios:dg33fb:*:*:*:*:*:*:* Versions dg33fb Vulnerable ·Intel
- cpe:2.3:h:intel:bios:dg33tl:*:*:*:*:*:*:* Versions dg33tl Vulnerable ·Intel
- cpe:2.3:h:intel:bios:dp35dp:*:*:*:*:*:*:* Versions dp35dp Vulnerable ·Intel
- cpe:2.3:h:intel:bios:dq35jo:*:*:*:*:*:*:* Versions dq35jo Vulnerable ·Intel
- cpe:2.3:h:intel:bios:dq35mp:*:*:*:*:*:*:* Versions dq35mp Vulnerable ·Intel
- cpe:2.3:h:intel:bios:dx38bt:*:*:*:*:*:*:* Versions dx38bt Vulnerable ·Intel
- cpe:2.3:h:intel:bios:mgm965tw:*:*:*:*:*:*:* Versions mgm965tw Vulnerable ·Intel
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-7096
- 2026-10-03 Alias added: GHSA-j6vc-v42r-phc6
References
More Intel Bios vulnerabilities
- TI-2020-09883 Out-of-bounds read in Intel Processors CVSS 3.1HIGH 7.8
- TI-2019-10846 Buffer overflow in Intel BIOS CVSS 3.1HIGH 8.0
- TI-2020-07004 Use of potentially dangerous function in Intel BIOS platform sample code for some… CVSS 3.1HIGH 7.8
- TI-2020-06947 Out-of-bounds read in Intel BIOS Advisory CVSS 3.1HIGH 7.8
- TI-2018-02648 Intel NUC kits with insufficient input validation in system firmware, potentially allows… CVSS 3.0HIGH 7.8
- TI-2020-09882 Insufficient control flow management in the firmware for some Intel(R) Processors may… CVSS 3.1MEDIUM 6.8
Sources
- CVE-2008-7096 · CVE Program
- CVE-2008-7096 · NVD
- FIRST EPSS
- GHSA-j6vc-v42r-phc6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences