Vulnerability details
CVE-2025-58770
AMI AptioV
TCG2 TPM RT Not Locked Issue
CVSS 4.0
7.2High
Official description
APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 7.2High | 4.0 | CVEProject cvelistV5 (CNA) (AMI) | CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:P |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| AMI | AptioV | AptioV_5.0 ≤ v < AptioV_5.041 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-12-12
- Last updated
- 2025-12-12
- State
- Published
- Assigner (CNA)
- AMI
Exploit prediction (EPSS)
0.11%
Probability of exploitation in 30 days
1.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Partial
Weaknesses (CWE)
- CWE-280Improper Handling of Insufficient Permissions or Privileges