Exposed dangerous method or function in InsydeH2O Kernel - CVE-2025-4275
Published: June 10, 2025
Vulnerability identifier: #VU110699
CSH Severity: Low
CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-4275
CWE-ID: CWE-749
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vendor: Insyde Software
Affected software:
InsydeH2O Kernel
InsydeH2O Kernel
Detailed vulnerability description
The vulnerability allows an attacker to escalate privileges on the system.
The vulnerability exists due to usage of an unprotected NVRAM variable. An attacker with physical access to the system can inject their own certificate in this variable and subsequently run arbitrary firmware (signed by the injected certificate) during the early boot process within the UEFI environment.
How to mitigate CVE-2025-4275
Cybersecurity Help is currently unaware of any official solution to address this vulnerability.