CVE-2025-58770 | THREATINT

Description

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.

PUBLISHED Reserved 2025-09-04 | Published 2025-12-12 | Updated 2025-12-12 | Assigner AMI

HIGH: 7.2CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

Problem types

CWE-280: Improper Handling of Insufficient Permissions or Privileges

Product status

Default status

unaffected

AptioV_5.0 (Custom) before AptioV_5.041

affected

References

go.ami.com/hubfs/Security Advisories/2025/AMI-SA-2025009.pdf

cve.org (CVE-2025-58770)

nvd.nist.gov (CVE-2025-58770)

Download JSON