CVE-2025-33045CWE-123CWE-200

Legacy Serial Redirection SMRAM Vulnerabilities

High · published September 9, 2025

CVSS v3.1
8.2
EPSS
0%
Percentile
4.7
In the wild
Unconfirmed
What it is

APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information disclosure, arbitrary data writing, and impact Confidentiality, Integrity, and Availability.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00159 · 4.7th percentile
Weaknesses
CWE-123 · Write-what-where Condition; CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-09T14:00Z
EPSS history
Timeline
  • 09 SEP 14:00Z
    Legacy Serial Redirection SMRAM Vulnerabilities
    cvelistv5