Back
CVE-2025-4275
SecureFlashDxe: Incorrect UEFI variable attributes check allows usage of invalid certificate
High7.8EPSS 0.48%
- Published
- Updated
- Reserved
- Assigned by
- Insyde
Description
A vulnerability in the digital signature verification process does not properly validate variable attributes which allows an attacker to bypass signature verification by creating a non-authenticated NVRAM variable. An attacker may to execute arbitrary signed UEFI code and bypass Secure Boot.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| InsydeCNA (assigner) | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
| NVDNVD · Deferred | 3.1 | High7.8 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 0.48% · top 58% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.
Weakness
- cwe-284: Improper Access Control
Affected products
- affected Kernel 5.2 – < 05.2A.16
- affected Kernel 5.3 – < 05.39.16
- affected Kernel 5.4 – < 05.47.16
- affected Kernel 5.5 – < 05.55.16
- affected Kernel 5.6 – < 05.62.16
- affected Kernel 5.7 – < 05.71.16
What to do
Solution: kernel 5.2, Version 05.2A.16 kernel 5.3, Version 05.39.16 kernel 5.4, Version 05.47.16 kernel 5.5, Version 05.55.16 kernel 5.6, Version 05.62.16 kernel 5.7, Version 05.71.16
References (2)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2025-4275)Record last updated .