CVE-2025-46750CWE-305

Authentication Bypass

Medium · published May 12, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00172 · 6.2th percentile
Weakness
CWE-305 · Authentication Bypass by Primary Weakness
Published
2025-05-12T16:13Z
EPSS history
Timeline
  • 12 MAY 16:13Z
    Authentication Bypass
    cvelistv5