CVE-2025-58770CWE-280

CVE-2025-58770

High · published December 12, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
1.6
In the wild
Unconfirmed
What it is

⚡ A local user can exploit BIOS vulnerabilities in APTIOV to escalate privileges through insufficient permissions — that’s like getting backstage access at a concert without a ticket! 🎟️ Think of it like a restricted area in a theme park. If someone manages to slip past security without the proper pass, they can gain access to all sorts of behind-the-scenes operations, potentially causing chaos! 🎢 An attacker could escalate their privileges and gain control over crucial system functions. This could lead to data integrity being compromised or even critical services being disrupted — not something you want in your environment! 🚨

Put simply

Think of it like a restricted area in a theme park. If someone manages to slip past security without the proper pass, they can gain access to all sorts of behind-the-scenes operations, potentially causing chaos! 🎢 This vulnerability arises from improper handling of permission checks in the APTIOV BIOS. A local user can manipulate system privileges, which could lead to unauthorized access and control over key functionalities.

What to do

An attacker could escalate their privileges and gain control over crucial system functions. This could lead to data integrity being compromised or even critical services being disrupted — not something you want in your environment! 🚨 For remediation, ensure that your BIOS is updated to the latest version, as vendors typically release patches addressing such vulnerabilities. Regularly audit access permissions and enforce strict security policies for local users. You've got this! With a little diligence, you can shore up your systems against this vulnerability and keep everything running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00117 · 1.6th percentile
Weakness
CWE-280 · Improper Handling of Insufficient Permissions or Privileges
Published
2025-12-12T20:15Z
Affected products (1)
ProductVersionsFixed in
ami/aptio_v≥ 5.0, < 5.0415.041
References (1)
EPSS history
Timeline
  • 12 DEC 15:03Z
    TCG2 TPM RT Not Locked Issue
    cvelistv5