APTIOV
by Ami
CVEs (31)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-40246 | Hig | 0.47 | 7.2 | 0.00 | Sep 20, 2022 | A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from… | ||
| CVE-2024-2315 | Hig | 0.46 | 7.1 | 0.00 | Nov 12, 2024 | APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability. | ||
| CVE-2023-34470 | Med | 0.44 | 6.8 | 0.00 | Sep 12, 2023 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability. | ||
| CVE-2025-33043 | Med | 0.38 | 5.8 | 0.00 | May 29, 2025 | APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity. | ||
| CVE-2023-34469 | Med | 0.32 | 4.9 | 0.00 | Sep 12, 2023 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality. | ||
| CVE-2024-33660 | Med | 0.28 | 4.3 | 0.00 | Nov 12, 2024 | An exploit is possible where an actor with physical access can manipulate SPI flash without being detected. | ||
| CVE-2025-58770 | 0.00 | — | 0.00 | Dec 12, 2025 | APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and… | |||
| CVE-2025-22833 | 0.00 | — | 0.00 | Oct 14, 2025 | APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution. | |||
| CVE-2025-33045 | 0.00 | — | 0.00 | Sep 9, 2025 | APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information… | |||
| CVE-2025-22830 | 0.00 | — | 0.00 | Aug 12, 2025 | APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability. | |||
| CVE-2025-22834 | 0.00 | — | 0.00 | Aug 12, 2025 | AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability. |
- risk 0.47cvss 7.2epss 0.00
A potential attacker can write one byte by arbitrary address at the time of the PEI phase (only during S3 resume boot mode) and influence the subsequent boot stages. This can lead to the mitigations bypassing, physical memory contents disclosure, discovery of any secrets from…
- risk 0.46cvss 7.1epss 0.00
APTIOV contains a vulnerability in BIOS where may cause Improper Access Control by a local attacker. Successful exploitation of this vulnerability may lead to unexpected SPI flash modifications and BIOS boot kit launches, also impacting the availability.
- risk 0.44cvss 6.8epss 0.00
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerability may lead to a loss of confidentiality, integrity and availability.
- risk 0.38cvss 5.8epss 0.00
APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation locally. Successful exploitation of this vulnerability can potentially impact of integrity.
- risk 0.32cvss 4.9epss 0.00
AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulnerability may lead to a loss of confidentiality.
- risk 0.28cvss 4.3epss 0.00
An exploit is possible where an actor with physical access can manipulate SPI flash without being detected.
- CVE-2025-58770Dec 12, 2025risk 0.00cvss —epss 0.00
APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and…
- CVE-2025-22833Oct 14, 2025risk 0.00cvss —epss 0.00
APTIOV contains a vulnerability in BIOS where an attacker may cause a Buffer Copy without Checking Size of Input by local accessing. Successful exploitation of this vulnerability may lead to arbitrary code execution.
- CVE-2025-33045Sep 9, 2025risk 0.00cvss —epss 0.00
APTIOV contains vulnerabilities in the BIOS where a privileged user may cause “Write-what-where Condition” and “Exposure of Sensitive Information to an Unauthorized Actor” through local access. The successful exploitation of these vulnerabilities can lead to information…
- CVE-2025-22830Aug 12, 2025risk 0.00cvss —epss 0.00
APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability.
- CVE-2025-22834Aug 12, 2025risk 0.00cvss —epss 0.00
AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability.
Page 2 of 2