CyberSec.Space Logo
Back to CVE Browser

CVE-2025-47827

🔥 Known Exploited (CISA KEV)MEDIUM
4.6
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-06-05
Last Modified2026-06-17
Data SourcesNVDCISA KEV

Vulnerability Description

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

Affected Platforms (CPE)

💻
Igel

Igel Os

< 11.01.100
💻
Microsoft

Windows 10 1507

< 10.0.10240.21161
💻
Microsoft

Windows 10 1607

< 10.0.14393.8519
💻
Microsoft

Windows 10 1809

< 10.0.17763.7919

References & Advisories

🔗 https://github.com/Zedeldi/CVE-2025-47827
🔗 https://github.com/Zedeldi/igelfs
🔗 https://github.com/Zedeldi/CVE-2025-47827
🔗 https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827
🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-47827

Related Vulnerabilities

CVE-2025-340829.3

A command injection vulnerability exists in IGEL OS versions prior to 11.04.270 within the Secure Terminal and Secure Shadow servi...

CVE-2022-258075.5

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the LDAPDesPWEncrypter class...

CVE-2022-258068.8

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. A hardcoded DES key in the PrefDBCredentials class ...

CVE-2022-258056.5

An issue was discovered in the IGEL Universal Management Suite (UMS) 6.07.100. The transmission of cleartext LDAP bind credentials...