Bundesamt für Sicherheit in der Informationstechnik Amazon · Intel Firmware: Mehrere Schwachstellen
Affects Bundesamt für Sicherheit in der Informationstechnik AmazonSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited.
Data as of 27 Oct 2026, 01:53 UTC
Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Exploitation evidence
Disclosed: evidence found.
CVE published 11 Feb 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
AI-suggested
Apply the Intel microcode updates provided by Ubuntu security notices USN-7269-1 and USN-7269-2 for your respective Ubuntu release. After updating the intel-microcode package, reboot the system to activate the fixes. Ubuntu Pro subscribers have extended support for older LTS releases. No additional mitigation is required beyond applying these official microcode updates.
Description
Multiple security vulnerabilities have been identified in Intel microcode affecting various Intel processors. These issues involve improper implementation of finite state machines in hardware logic, improper access restrictions in Intel SGX, and UEFI firmware access control weaknesses. Local privileged or authenticated attackers could exploit these flaws to cause denial of service conditions. Fixes have been released in updated Intel microcode packages for several Ubuntu releases, requiring system updates and reboots to apply.
References
- wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0323.json (opens in a new tab)
- wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0323 (opens in a new tab)
- intel.com/content/www/us/en/security-center/advisory/intel-sa-01198.html (opens in a new tab)
- intel.com/content/www/us/en/security-center/advisory/intel-sa-01139.html (opens in a new tab)
- intel.com/content/www/us/en/security-center/advisory/intel-sa-01120.html (opens in a new tab)
- dell.com/support/kbdoc/000239036 (opens in a new tab)
- dell.com/support/kbdoc/de-de/000283897/dsa-2025-041-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-1-ipu (opens in a new tab)
- support.hpe.com/hpesc/public/docDisplay?docId=hpesbhf04790en_us&docLocale=en_US (opens in a new tab)
- dell.com/support/kbdoc/de-de/000236844/dsa-2025-001 (opens in a new tab)
- support.lenovo.com/us/en/product_security/LEN-186850 (opens in a new tab)
- security.ts.fujitsu.com/ProductSecurity/content/Fujitsu-PSIRT-FJ-ISS-2024-092000-Security-Advisory.asp?lng=com (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2025-c99f9d789a (opens in a new tab)
- bodhi.fedoraproject.org/updates/FEDORA-2025-dd577cf35f (opens in a new tab)
- ubuntu.com/security/notices/USN-7269-1 (opens in a new tab)
- ubuntu.com/security/notices/USN-7269-2 (opens in a new tab)
- alas.aws.amazon.com/AL2/ALAS-2025-2787.html (opens in a new tab)
- support.hp.com/us-en/document/ish_12080286-12080322-16/HPSBHF04010 (opens in a new tab)
- lists.debian.org/debian-lts-announce/2025/03/msg00021.html (opens in a new tab)
- dell.com/support/kbdoc/000283929 (opens in a new tab)
- access.redhat.com/errata/RHSA-2025:7043 (opens in a new tab)