CVE-2025-30185CWE-489

CVE-2025-30185

High · published November 11, 2025

CVSS v3.1
7.9
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

⚡ A little-known debug code in Intel UEFI reference platforms could leave the door wide open for privilege escalation! Think of it like a restaurant's kitchen where the head chef accidentally leaves the recipe book unlocked on the counter. With a privileged user present, a crafty adversary can sneak in and change the ingredients on the fly! This vulnerability could lead to a situation where an attacker with local access can tamper with system data, causing the system to crash or behave unpredictably. Imagine a restaurant serving a dish made with ingredients that were secretly swapped — it could ruin the entire meal! This puts the integrity and availability of the system at serious risk!

Put simply

Think of it like a restaurant's kitchen where the head chef accidentally leaves the recipe book unlocked on the counter. With a privileged user present, a crafty adversary can sneak in and change the ingredients on the fly! This CVE addresses the presence of active debug code in Intel UEFI reference platforms, which may allow a local adversary with privileged access to execute a denial of service attack and alter crucial data without any user interaction.

What to do

This vulnerability could lead to a situation where an attacker with local access can tamper with system data, causing the system to crash or behave unpredictably. Imagine a restaurant serving a dish made with ingredients that were secretly swapped — it could ruin the entire meal! This puts the integrity and availability of the system at serious risk! To mitigate this vulnerability, ensure that your systems are updated to the latest firmware versions provided by Intel. Regularly audit your systems for unauthorized privileged users and consider disabling debugging features in production environments. Patch management is key! You've got this! Follow these steps, and you can lock down your systems like a pro! 🛡️

The record
Technical detail
CVSS v3.1
7.9 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00134 · 2.6th percentile
Weakness
CWE-489 · Active Debug Code
Published
2025-11-11T22:15Z
References (1)
EPSS history
Timeline
  • 11 NOV 16:50Z
    Active debug code for some Intel UEFI reference platforms within Ring 0: Kernel may allow a denial of service and escalation of privilege
    cvelistv5