« Volver al listado

CVE-2025-46750

Estado: AplazadaMedia (4.4)—

SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

SEL — BiosAI

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2025-46750",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-46750",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-05-12T17:30:19.291613Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@selinc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@selinc.com",
      "affectedData": [
        {
          "vendor": "Schweitzer Engineering Laboratories",
          "product": "SEL-3350-1",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "1.3.49152.117",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Schweitzer Engineering Laboratories",
          "product": "SEL-3355-2",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2.6.49152.98",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Schweitzer Engineering Laboratories",
          "product": "SEL-3360-2",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "2.6.49152.98",
              "versionType": "custom"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-05-12T17:15:48.850",
  "references": [
    {
      "url": "https://selinc.com/products/software/latest-software-versions/",
      "source": "security@selinc.com"
    }
  ],
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@selinc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-305"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected  BIOS settings by importing a BIOS settings file with no password set."
    },
    {
      "lang": "es",
      "value": "Los paquetes de BIOS SEL anteriores a 1.3.49152.117 o 2.6.49152.98 permiten que un atacante local evite la autenticación de contraseña y cambie la configuración del BIOS protegida por contraseña importando un archivo de configuración del BIOS sin contraseña establecida."
    }
  ],
  "lastModified": "2026-06-17T09:26:55.630",
  "sourceIdentifier": "security@selinc.com"
}