PT-2026-24491 · Intel · Intel(R) Reference Platforms Uefi Firmware

CVE-2025-20005 · Publicado 2026-03-10 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v4.0

5.6

Média

Vetor base

AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Intel(R) reference platforms UEFI firmware (affected versions not specified)

Description A flaw exists in some UEFI firmware for certain Intel(R) reference platforms that could allow a privilege escalation. An attacker with privileged user access and a high level of complexity could potentially manipulate data. This requires local access and does not need user interaction. The issue may impact system integrity, with potential confidentiality and availability impacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2025-20005

Produtos afetados

Intel(R) Reference Platforms Uefi Firmware

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-20005 · Nota de Segurança
• https://t.me/CVEtracker/47042 · Publicação no Telegram
• https://twitter.com/CVEnew/status/2031504058222075923 · Publicação no Twitter
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01234.html · Nota
• https://t.me/cveNotify/155006 · Publicação no Telegram