CVE-2025-20034CWE-20

Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003…

Medium · published May 13, 2025

CVSS v4.0
5.6
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003 may allow a privileged user to potentially enable information disclosure via local access.

The record
Technical detail
CVSS v4.0
5.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00168 · 5.9th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2025-05-13T21:01Z
EPSS history
Timeline
  • 13 MAY 21:01Z
    Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003…
    cvelistv5