PT-2026-24490 · Intel · Intel Uefi Reference Platforms

Published 2026-03-10 · Updated 2026-03-10 · CVE-2025-20096

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:L/AC:H/AT:P/PR:H/UI:A/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

Name of the Vulnerable Software and Affected Versions Intel Reference Platforms (affected versions not specified)

Description An improper input validation issue exists in the UEFI firmware for some Intel Reference Platforms, potentially allowing for escalation of privilege. A system software adversary with a privileged user account, combined with a high complexity attack, may be able to manipulate data. This requires local access, active user interaction, and does not require special internal knowledge. The issue may impact the integrity and availability of the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2025-20096

Affected Products

Intel Uefi Reference Platforms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-20096 · Security Note
• https://twitter.com/CVEnew/status/2031504059266404810 · Twitter Post
• https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01393.html · Note
• https://t.me/CVEtracker/47048 · Telegram Post