Unprotected BIOS / UEFI Settings
Overview
Unprotected BIOS or UEFI settings refer to firmware configurations that lack adequate security controls, such as passwords or access restrictions. This vulnerability arises when system firmware interfaces are left accessible without authentication, allowing unauthorized users to modify critical boot and hardware settings.
Why It Matters
- Allows attackers to alter system boot order or disable security features, potentially leading to persistent malware infections.
- Exposes organizations to data breaches, system downtime, and loss of control over hardware integrity.
- Common consequences include unauthorized firmware modifications, bypass of operating system security, and compromised device trustworthiness.
Where It Appears
- Enterprise and personal computing environments where BIOS/UEFI firmware is present.
- Systems including desktops, laptops, servers, and embedded devices that rely on BIOS/UEFI for boot processes.
- Typical conditions involve absence of firmware passwords or weak/default credentials protecting BIOS/UEFI settings.
How It Is Exploited (High Level)
Attackers gain physical or remote access to a device and enter the BIOS/UEFI interface without restriction, enabling them to change boot configurations, disable security mechanisms, or install low-level malware that persists beyond operating system reinstallation.
How It Is Addressed (High Level)
Mitigation involves implementing strong authentication controls on BIOS/UEFI settings, enforcing firmware integrity checks, and restricting physical and remote access to firmware interfaces through organizational policies and hardware security features.
Related Topics
Firmware security, bootkit attacks, hardware root of trust, secure boot, physical security, privilege escalation vulnerabilities.