Clevo UEFI Firmware CVE-2025-11577

Exploitation requires that the attacker possess the Boot Guard and Boot Policy Manifest private signing keys that were inadvertently shipped inside Clevo's UEFI update packages (e.g., B10717.exe), and the ability to deliver a forged firmware image to a target. Per the CVSS physical vector (AV:P), the limiting factor is physical access to perform SPI/firmware reprogramming - this is NOT remotely exploitable. Only Clevo-based systems whose Boot Guard trust anchors correspond to the leaked keys are affected; systems using different OEM keys or with the keys revoked/rotated are not. The decisive mitigating factor is the physical-access requirement, which confines realistic exploitation to targeted, insider, supply-chain, or evil-maid contexts rather than opportunistic remote attacks.

Conflicting signals make this a high-impact but low-likelihood issue rather than an active emergency. The CVSS 7.6 (HIGH) reflects total loss of boot-chain confidentiality, integrity, and availability with a scope change (S:C), but the attack vector is physical (AV:P), which sharply constrains real-world exploitability. EPSS is only 0.26% (16th percentile) and the CVE is NOT on the CISA KEV list, so there is no evidence of active or widespread exploitation. No public exploit code was identified in the provided data, though the vulnerability is unusual in that the enabling artifact - the private Boot Guard/BPM signing keys - is itself the leaked secret, so the hardest part of forging trusted firmware (key possession) is already satisfied for anyone who obtained the B10717.exe package. The low EPSS despite the severe technical impact is consistent with the physical/targeted nature of the threat (evil-maid, supply-chain, or insider scenarios) rather than mass remote exploitation. Bottom line: a genuine integrity concern warranting key rotation and firmware remediation, but not an immediate drop-everything priority absent physical exposure of affected Clevo-based systems.

An attacker who extracted the leaked Boot Guard/BPM private keys from Clevo's publicly distributed update package (e.g., B10717.exe) crafts a malicious UEFI firmware image and signs it so it passes platform verification. With physical access to a target Clevo-based laptop, they reflash the SPI chip with the forged firmware, installing a bootkit that survives Boot Guard checks and OS reinstallation. No public exploit tool was identified, but the leaked keys remove the primary barrier to forging trusted firmware.