CVE-2019-18216
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2019-18216
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The BIOS configuration design on ASUS ROG Zephyrus M GM501GS laptops with BIOS 313 relies on the main battery instead of using a CMOS battery, which reduces the value of a protection mechanism in which booting from a USB device is prohibited. Attackers who have physical laptop access can exhaust the main battery to reset the BIOS configuration, and then achieve direct access to the hard drive by booting a live USB OS without disassembling the laptop. NOTE: the vendor has apparently indicated that this is "normal" and use of the same battery for the BIOS and the overall system is a "new design." However, the vendor apparently plans to "improve" this an unspecified later time
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
ASUS ROG Zephyrus M GM501GS 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ASUS ROG Zephyrus M GM501GS是中国台湾华硕（ASUS）公司的一款笔记本电脑。 ASUS ROG Zephyrus M GM501GS（带有BIOS 313）中存在安全漏洞。攻击者可通过用尽主电池电量利用该漏洞重置BIOS配置并获取硬盘的直接访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2019-18216
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-18216
请登录查看更多情报信息。
Same Patch Batch · n/a · 2019-10-20 · 3 CVEs total
| CVE-2019-10716 | Verodin 信息泄露漏洞 | |
| CVE-2019-10715 | Verodin Director 跨站脚本漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2019-18216
No comments yet