« Volver al listado

CVE-2025-3052

Estado: AplazadaAlta (8.2)—

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

AV:L con PR:H indica escalada de privilegios local. Arbitrary write en UEFI firmware permite ejecución de código no confiable, modificación de configuración crítica (T1098, T1556) y persistencia. Acceso administrativo requerido.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Privileged Account ManagementUser Account ManagementRestrict File and Directory PermissionsOperating System ConfigurationMulti-factor AuthenticationExecution Prevention

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Microsoft — Uefi FirmwareAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-3052",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-3052",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-06-10T19:51:42.494987Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "CHANGED",
          "version": "3.1",
          "baseScore": 8.2,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 6,
        "exploitabilityScore": 1.5
      }
    ]
  },
  "affected": [
    {
      "source": "cret@cert.org",
      "affectedData": [
        {
          "vendor": "DT Research",
          "product": "BiosFlashShell",
          "versions": [
            {
              "status": "affected",
              "version": "80.02"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "BiosFlashShell",
          "versions": [
            {
              "status": "affected",
              "version": "81.02"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "70.17"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "70.18"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "70.19"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "70.20"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "70.21"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "70.22"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "71.17"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "71.18"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "71.19"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "71.20"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "71.21"
            }
          ]
        },
        {
          "vendor": "DT Research",
          "product": "Dtbios",
          "versions": [
            {
              "status": "affected",
              "version": "71.22"
            }
          ]
        }
      ]
    }
  ],
  "published": "2025-06-10T20:15:23.037",
  "references": [
    {
      "url": "https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html",
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.binarly.io/advisories/brly-dva-2025-001",
      "source": "cret@cert.org"
    },
    {
      "url": "https://www.kb.cert.org/vuls/id/806555",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Deferred",
  "descriptions": [
    {
      "lang": "en",
      "value": "An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de escritura arbitraria en el firmware UEFI firmado por Microsoft permite la ejecución de código de software no confiable. Esto permite a un atacante controlar su valor, lo que provoca escrituras arbitrarias en memoria, incluyendo la modificación de configuraciones críticas del firmware almacenadas en la NVRAM. La explotación de esta vulnerabilidad podría permitir eludir la seguridad, mecanismos de persistencia o comprometer completamente el sistema."
    }
  ],
  "lastModified": "2026-06-17T09:19:06.053",
  "sourceIdentifier": "cret@cert.org"
}