2 lines
2.4 KiB
JSON
2 lines
2.4 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unknown","platforms":["kernel 5.2","kernel 5.3","kernel 5.4","kernel 5.5","kernel 5.6","kernel 5.7"],"product":"InsydeH2O","vendor":"Insyde Software","versions":[{"lessThan":"05.2A.16","status":"affected","version":"Kernel 5.2","versionType":"Tag"},{"lessThan":"05.39.16","status":"affected","version":"Kernel 5.3","versionType":"Tag"},{"lessThan":"05.47.16","status":"affected","version":"Kernel 5.4","versionType":"Tag"},{"lessThan":"05.55.16","status":"affected","version":"Kernel 5.5","versionType":"Tag"},{"lessThan":"05.62.16","status":"affected","version":"Kernel 5.6","versionType":"Tag"},{"lessThan":"05.71.16","status":"affected","version":"Kernel 5.7","versionType":"Tag"}]}],"source":"8338d8cb-57f7-4252-abc0-96fd13e98d21"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot."},{"lang":"es","value":"Al ejecutar la utilidad proporcionada, se cambia el certificado en cualquier BIOS Insyde y luego se puede iniciar el archivo .efi adjunto."}],"id":"CVE-2025-4275","lastModified":"2026-06-17T09:32:55.380","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.1,"impactScore":6.0,"source":"8338d8cb-57f7-4252-abc0-96fd13e98d21","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-4275","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2025-06-11T13:38:13.231273Z","version":"2.0.3"}}]},"published":"2025-06-11T01:15:20.750","references":[{"source":"8338d8cb-57f7-4252-abc0-96fd13e98d21","url":"https://www.insyde.com/security-pledge/sa-2025002/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"https://www.kb.cert.org/vuls/id/211341"}],"sourceIdentifier":"8338d8cb-57f7-4252-abc0-96fd13e98d21","vulnStatus":"Deferred"}
|