cve/2015/CVE-2015-2890.md

### [CVE-2015-2890](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-2890)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)

### Description

The BIOS implementation on Dell Latitude, OptiPlex, Precision Mobile Workstation, and Precision Workstation Client Solutions (CS) devices with model-dependent firmware before A21 does not enforce a BIOS_CNTL locking protection mechanism upon being woken from sleep, which allows local users to conduct EFI flash attacks by leveraging console access, a similar issue to CVE-2015-3692.

### POC

#### Reference
- http://www.kb.cert.org/vuls/id/577140
- http://www.kb.cert.org/vuls/id/BLUU-9XXQ9L

#### Github
No PoCs found on GitHub currently.