CVE-2025-4275
HIGH EPSS 31.4%
Published Jun 11, 20251y ago · Modified Jun 17, 20262w ago
7.8 CVSS 3.1
Published Jun 11, 2025 1y ago
Last Modified Jun 17, 2026 2w ago
Description
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.
CVSS Details
Base Score
Exploitability
Impact
Vector string
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H Attack Vector Local
Attack Complexity High
Privileges Required Low
User Interaction None
Scope Changed
Confidentiality High
Integrity High
Availability High
Threat Intelligence
EPSS Exploit Probability
31.4% percentile
Exploit & Patch Status
No Known Exploit
No Patch Available
References 2
- insyde.com https://www.insyde.com/security-pledge/sa-2025002/
- kb.cert.org https://www.kb.cert.org/vuls/id/211341
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.