WID-SEC-W-2025-2299

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Lenovo BIOS: Mehrere Schwachstellen

view advisory published 2025-10-14

Ein lokaler Angreifer kann mehrere Schwachstellen in Lenovo BIOS ausnutzen, um Daten zu manipulieren, einen Denial of Service zu verursachen, Code Auszuführen und seine Rechte zu erweitern.

01

describes (6)

Related CVEs.

IDseverity exploitable
CVE-2025-0033US——
Improper access control within AMD SEV-SNP could allow an admin privileged attacker to write to the RMP during SNP initialization, potentially resulting in a loss of SEV-SNP guest…
CVE-2025-33044UShigh7.8—
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Restriction of Operations within the Bounds of a Memory Buffer by local means. Successful exploitati…
CVE-2025-22833UShigh7.3—
APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability m…
CVE-2025-22832UShigh7.8—
APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and l…
CVE-2025-22831UShigh7.8—
APTIOV contains a vulnerability in BIOS where an attacker may cause an Out-of-bounds Write by local. Successful exploitation of this vulnerability may lead to data corruption and l…
CVE-2025-27054US——
Memory corruption while processing a malformed license file during reboot.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan