A TIMESYS DEEP DIVE

According to ArsTechnica, this new vulnerability affects “hundreds of Windows and Linux computer models from virtually all hardware makers” to “a new attack that executes malicious firmware early in the boot-up sequence.” This can result in “infections that are nearly impossible to detect or remove using current defense mechanisms.”

ArsTechnica goes on to state, “The attack—dubbed LogoFAIL by the researchers who devised it—is notable for the relative ease in carrying it out, the breadth of both consumer- and enterprise-grade models that are susceptible, and the high level of control it gains over them. In many cases, LogoFAIL can be remotely executed in post-exploit situations using techniques that can’t be spotted by traditional endpoint security products. And because exploits run during the earliest stages of the boot process, they are able to bypass a host of defenses, including the industry-wide Secure Boot, Intel’s Secure Boot, and similar protections from other companies that are devised to prevent so-called bootkit infections.”

Timesys recommends immediately addressing these new vulnerabilities and integrating upstream fixes. Our engineering team at Timesys is happy to assist with this, just reply to this email and let us know.

These LogoFAIL vulnerabilities are being tracked under the following CVE designations, however this list is currently incomplete. You can click each of the below links for more info on that vulnerability: