ID:12083 - Exploit for Improper verification of cryptographic signature in IGEL OS - CVE-2025-47827

Link to public exploit:

Vulnerability description

The vulnerability allows an attacker to bypass implemented security restrictions.

The vulnerability exists due to improper verification of cryptographic signature when mounting a SquashFS image in IGEL OS firmware. An attacker with physical access to the system can bypass Secure Boot protection feature and compromise the affected system.

Note, the vulnerability is being actively exploited in the wild against the Windows users. 

Remediation