PT-2026-24496 · Intel · Intel(R) Reference Platforms Uefi Firmware

CVE-2025-20105 · Publicado 2026-03-10 · Atualizado 2026-03-10

Positive Technologies (AI Summary)

CVSS v4.0

8.7

Alta

Vetor base

AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Intel(R) reference platforms UEFI firmware (affected versions not specified)

Description A flaw exists in some UEFI firmware SMM modules that involves improper input validation. This could allow a system software adversary with privileged user access and a low complexity attack to achieve local code execution. The issue may impact the confidentiality, integrity, and availability of the system. The potential impact to confidentiality, integrity, and availability is considered high.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2025-20105

Produtos afetados

Intel(R) Reference Platforms Uefi Firmware

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-20105 · Nota de Segurança
• https://twitter.com/CVEnew/status/2031504051225887137 · Publicação no Twitter
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01234.html · Nota
• https://t.me/CVEtracker/47049 · Publicação no Telegram