Skip to content

vulnerable boards not detected if system vendor replaces OEM fields #4

@draeath

Description

@draeath

The fields currently used to determine the make/model of the motherboard are not reliable.

For example, my system vendor has changed these fields to System76 / thelio-major-r2 (there are other possible values as well) (I don't know which field exactly contains the product ID there, because this is available in rust but the Get-WmiObject call returns different stuff). While my specific board ("TRX40 AORUS PRO WIFI") is not on the list, it should be noted somewhere that this detection scheme is not 100% reliable, because these fields are malleable. To be sure, one needs to explicitly check the make/model of their board physically, from their shipping materials, from the UEFI GUI, or so on.

Get-WmiObject win32_baseboard returns the following on one of these, for example:

Manufacturer : System76
Model        :
Name         : Base Board
SerialNumber : Default string
SKU          :
Product      : Thelio Major

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions