CVE-2025-37147CWE-290

CVE-2025-37147

High · published October 14, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

⚡ A sneaky flaw lets attackers bypass the secure boot process on certain Access Points! This means they could run unapproved firmware—think of it as letting a pirate ship dock in a military harbor! 🏴‍☠️ Imagine a highly secure hotel where only verified guests can enter. If an unauthorized individual finds a way to bypass security and check in without a reservation, they could wreak havoc in the rooms, tampering with anything they want. That's exactly what's happening here with these Access Points! This vulnerability could allow an attacker to execute unauthorized firmware on the Access Points, leading to potentially devastating outcomes such as data interception, network manipulation, or even total control over the device. With custom firmware running wild, your network could be at serious risk!

Put simply

Imagine a highly secure hotel where only verified guests can enter. If an unauthorized individual finds a way to bypass security and check in without a reservation, they could wreak havoc in the rooms, tampering with anything they want. That's exactly what's happening here with these Access Points! CVE-2025-37147 is a Secure Boot Bypass vulnerability that allows an adversary to exploit the hardware root of trust verification, enabling unauthorized firmware to execute on vulnerable Access Points. This undermines the integrity of the device and could lead to significant security breaches.

What to do

This vulnerability could allow an attacker to execute unauthorized firmware on the Access Points, leading to potentially devastating outcomes such as data interception, network manipulation, or even total control over the device. With custom firmware running wild, your network could be at serious risk! To protect your network, ensure that your Access Points are updated to the latest firmware that patches this vulnerability. Additionally, review your device configurations and consider implementing network monitoring solutions to detect any unauthorized access attempts. 🛡️ You've got this! By taking these steps, you'll fortify your defenses and keep those pesky pirates at bay! 🚀

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2025-10-14T21:15Z
References (1)
EPSS history
Timeline
  • 14 OCT 16:42Z
    Secure Boot Bypass allows for Compromise of Hardware Root of Trust
    cvelistv5