Patchfirst
Patchfirst
T1542PersistenceStealth

Pre-OS Boot

Adversaries may abuse Pre-OS Boot mechanisms as a way to establish persistence on a system. During the booting process of a computer, firmware and various startup services are loaded before the operating system. These programs control flow of execution before the operating system takes control. Adversaries may overwrite data in boot drivers or firmware such as BIOS (Basic Input/Output System)…

attack.mitre.org ↗
CVEs1
In 1
Reports1
Sub-techniques T1542.001System Firmware6T1542.002Component FirmwareT1542.003BootkitT1542.004ROMMONkit2T1542.005TFTP Boot1

CVEs linked to Pre-OS Boot

1 CVE, by priority. Each link shows its badge.
  1. CVE-2025-47827IGEL OS Use of a Key Past its Expiration Date Vulnerability
    IGEL · IGEL OSKEVPublic exploitMedium · 4.6T1542Pre-OS BootT1542.001System Firmware
    AI mapping from the description · how it is exploited
    4.9%Top 7.9%
    64.6priority

Linked through a sub-technique

8 more
  1. CVE-2017-6742Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
    Cisco · IOS and IOS XE SoftwareKEVPublic exploitHigh · 8.8T1574Hijack Execution FlowT1059Command and Scripting Interpreter+2 more
    21.4%Top 2.4%
    68.7priority
  2. CVE-2020-5379Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability
    Dell · CPG BIOSMedium · 6.8T1542.001System Firmware
    0.4%Top 66%
    11.5priority
  3. CVE-2020-5376Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability
    Dell · CPG BIOSMedium · 6.8T1542.001System Firmware
    0.4%Top 67%
    11.4priority
  4. CVE-2020-5378Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability
    Dell · CPG BIOSMedium · 6.8T1542.001System Firmware
    0.4%Top 67%
    11.4priority
  5. CVE-2020-5326Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…
    Dell · Dell Client Consumer and Commercial PlatformsMedium · 6.1T1542.001System FirmwareT1068Exploitation for Privilege Escalation
    0.3%Top 71%
    10.0priority
  6. CVE-2020-3416Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
    Cisco · Cisco IOS XE SoftwareMedium · 6.7T1078Valid AccountsT1542.004ROMMONkit
    0.3%Top 75%
    9.7priority
  7. CVE-2020-3513Cisco IOS XE Software for Cisco ASR 900 Series Route Switch Processor 3 Arbitrary Code Execution Vulnerabilities
    Cisco · Cisco IOS XE SoftwareMedium · 6.7T1078Valid AccountsT1542.004ROMMONkit
    0.3%Top 75%
    9.7priority
  8. CVE-2019-1736Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability
    Cisco · Cisco Identity Services Engine SoftwareMedium · 6.2T1542.001System Firmware
    0.2%Top 84%
    7.5priority

Passages that support these links

↑ ↓ chooseEnter openEsc close