#VU110699 Exposed dangerous method or function in InsydeH2O Kernel - CVE-2025-4275
Published: June 10, 2025
Vulnerability identifier: #VU110699
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-4275
CWE-ID: CWE-749
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
InsydeH2O Kernel
InsydeH2O Kernel
Software vendor:
Insyde Software
Insyde Software
Description
The vulnerability allows an attacker to escalate privileges on the system.
The vulnerability exists due to usage of an unprotected NVRAM variable. An attacker with physical access to the system can inject their own certificate in this variable and subsequently run arbitrary firmware (signed by the injected certificate) during the early boot process within the UEFI environment.
Remediation
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.