עברית

Vulnerability Intelligence

CVE-2025-37147

High 7.1

Published
Last modified
NVD status
Deferred

Description

A Secure Boot Bypass Vulnerability exists in affected Access Points that allows an adversary to bypass the hardware root of trust verification in place to ensure only vendor-signed firmware can execute on the device. An adversary can exploit this vulnerability to run modified or custom firmware on affected Access Points.

References1

Metrics

CVSS 3.1
7.1 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
EPSS — exploit probability
0% percentile: 4 · as of 9 November 2026
CWE
CWE-290

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.