CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-20629: Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network Adapter E810 Series before version 4.60 may allow an...
5.4
CVSS
Description
Insecure inherited permissions in the NVM Update Utility for some Intel(R) Ethernet Network Adapter E810 Series before version 4.60 may allow an authenticated user to potentially enable escalation of privilege via local access.
Classification
CVE ID: CVE-2025-20629
CVSS Base Severity: MEDIUM
CVSS Base Score: 5.4
CVSS Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Problem Types
Escalation of Privilege Insecure Inherited PermissionsAffected Products
Vendor: n/a
Product: Intel(R) Ethernet Network Adapter E810 Series
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.01% (probability of being exploited)
EPSS Percentile: 0.78% (scored less or equal to compared to others)
EPSS Date: 2025-06-11 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-20629https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01295.html