« Volver al listado

CVE-2025-24857

Estado: AnalizadaAlta (7.6)—

Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:P (acceso físico) requiere T1091 (medios extraíbles/acceso físico). El atacante ejecuta código en boot mediante manipulación de memoria volátil, logra ejecución de comandos (T1059) y potencial escalada de privilegios (T1068) en chip Qualcomm.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Execution PreventionBehavior Prevention on EndpointDisable or Remove Feature or ProgramThreat Intelligence ProgramRestrict Web-Based ContentPrivileged Account Management

Tecnologías afectadas (1)

Denx — U-boot

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-24857",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-24857",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-12-11T20:21:19.282375Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "cve@mitre.org",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 7.6,
          "attackVector": "PHYSICAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 0.9
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-12-10T21:16:03.730",
  "references": [
    {
      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01",
      "tags": [
        "Third Party Advisory",
        "US Government Resource"
      ],
      "source": "cve@mitre.org"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code."
    }
  ],
  "lastModified": "2026-06-17T08:59:44.730",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C4A006C7-7EDF-41A2-9679-24C6F423B9CD",
              "versionEndExcluding": "2017.11"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq4019:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AA679375-BB14-4B24-8AD9-B2BFBACE2FDB"
            },
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq5018:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0E84640A-6848-4C76-96FC-EA349801D440"
            },
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq5322:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0674C5CF-5F26-4FB6-9859-B9E730DA3CFC"
            },
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FDC1ADAD-DA77-47EF-8DB9-C36961C560C2"
            },
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AC82552A-9E7C-4A13-B7A5-43CEA218675C"
            },
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2118C404-402F-463C-8160-3CC3B703DF30"
            },
            {
              "criteria": "cpe:2.3:h:qualcomm:ipq9574:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0C866E83-23ED-495C-AA5A-0B01973674BF"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}