CVE-2025-37147: Secure Boot Bypass allows for Compromise of Hardware Root of Trust
A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware on affected Access Points.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-37147?
The severity of CVE-2025-37147 is rated high with a score of 7.1.
How do I fix CVE-2025-37147?
To fix CVE-2025-37147, it is recommended to update the firmware of the affected Access Points to the latest vendor-signed version.
What types of devices are affected by CVE-2025-37147?
CVE-2025-37147 affects certain Access Points that utilize Secure Boot for hardware root of trust verification.
What are the potential impacts of exploiting CVE-2025-37147?
Exploiting CVE-2025-37147 can allow an adversary to run modified or custom firmware, compromising the device's security.
Is user interaction required to exploit CVE-2025-37147?
No, user interaction is not required to exploit CVE-2025-37147.