CVE-2025-58770
Improper Privilege Handling in APTIOV BIOS Causes Escalation
Publication date: 2025-12-12
Last updated on: 2025-12-12
Assigner: AMI
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| ami | aptio | 4.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-280 | The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state. |
Attack-Flow Graph
AI Powered Q&A
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The provided information does not specify how this vulnerability affects compliance with common standards and regulations such as GDPR or HIPAA.
Can you explain this vulnerability to me?
This vulnerability in APTIOV BIOS involves improper handling of insufficient permissions or privileges when accessed locally by a user. Exploiting this flaw can allow a user to escalate their authorization level beyond what is normally permitted.
How can this vulnerability impact me? :
Successful exploitation of this vulnerability can lead to escalation of authorization, which may compromise the integrity and availability of the system.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability is related to AMI's AptioV BIOS version 5.041 and involves improper handling of permissions by local access. Detection involves verifying the BIOS version on your system to see if it is version 5.041 or earlier. Since this is a BIOS vulnerability, network detection commands are not applicable. To check the BIOS version on a Windows system, you can use the command: 'wmic bios get smbiosbiosversion'. On Linux, you can use: 'sudo dmidecode -s bios-version'. If the BIOS version matches or is older than 5.041, the system is vulnerable. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to update the AptioV BIOS to version 5.041 or later, where the vulnerability has been addressed. Applying the security advisory AMI-SA-2025009 update from AMI is recommended to fix the issue and prevent escalation of privileges. [1]