Cologne Firmware
CVE-2025-47378
HIGH
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V14 - Data Protection System info exposure prevention
|
| Impact | CVSS 7.1 (HIGH). Attack vector: Local. Complexity: Low. Privileges required: Low. User interaction: None. |
| Exploit ScenarioDerived | An attacker could exploit this vulnerability to compromise the affected system. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain. [CVSS 7.1 HIGH]
RemediationAI
Monitor vendor advisories for a patch.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Affects Cologne Firmware. Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
Know when Cologne Firmware gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
Cryptographic Issue when a shared VM reference allows HLOS to boot loader and access cert chain.
Executive ViewAI
A cryptographic vulnerability in shared VM references enables unauthorized access to boot loaders and certificate chains, potentially allowing attackers to compromise system integrity and bypass security controls. This affects organizations running vulnerable virtualization environments and requires immediate containment measures until a patch becomes available.
Implement network segmentation to restrict access to boot loader interfaces; disable VM reference sharing where not required for operations; enforce strict access controls and authentication for certificate chain access; deploy enhanced logging and SIEM monitoring for boot-related activities; restrict HLOS (High-Level Operating System) permissions to least-privilege principles; consider temporary VM migration to unaffected hypervisor versions if available; establish continuous vulnerability monitoring for patch availability.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Affected Products (CPE)CVE.org
More in Cologne Firmware
View allMemory Corruption when multiple threads concurrently access and modify shared resources. [CVSS 7.8 HIGH]
Video Collaboration Vc3 Platform Firmware versions up to - contains a security vulnerability (CVSS 7.8).
Memory Corruption when processing invalid user address with nonstandard buffer address. [CVSS 7.8 HIGH]
Memory Corruption when accessing buffers with invalid length during TA invocation. [CVSS 7.8 HIGH]
Memory Corruption while processing IOCTL call to update sensor property settings with invalid input parameters. [CVSS 7.
Transient DOS when processing a received frame with an excessively large authentication information element. [CVSS 6.5 M
GitHub PoC
Exploit-DB