AMI Aptio V CVE-2025-58770

Requires LOCAL access to a system running AMI Aptio V firmware with a low-privileged authenticated account or local code execution (CVSS PR:L, AV:L) - it is NOT remotely or unauthenticated exploitable. The specific prerequisite is an actor able to interact with the affected BIOS interface/privilege boundary that improperly handles insufficient permissions (CWE-280). Limiting factors: attacker must first gain a foothold on the host; no network path; no user interaction needed once local access exists. Impact is limited to integrity and availability (no confidentiality impact per VC:N). Exact affected firmware builds should be verified against AMI-SA-2025009.

This is a locally-exploitable privilege escalation in AMI Aptio V (APTIOV) BIOS firmware (CWE-280, Improper Handling of Insufficient Permissions or Privileges). The only CVSS data provided is a CVSS 4.0 vector (AV:L/AC:L/AT:N/PR:L/UI:N) scoring 7.2, which indicates local attack vector, low complexity, and low privileges already required (authenticated local user) - NOT remote or unauthenticated. The threat signals are consistently LOW for real-world urgency: EPSS is 0.12% (1st percentile), there is no CISA KEV listing, and no public exploit was identified at time of analysis. The description notes integrity and availability impact but explicitly no confidentiality impact (VC:N), consistent with a firmware integrity/DoS-class escalation rather than data theft. The elevated base score is driven almost entirely by the HIGH vulnerable- and subsequent-system integrity/availability impacts (VI:H/VA:H/SC:H/SI:H/SA:H) that firmware-level compromise implies, not by ease or likelihood of exploitation. Net assessment: a genuine but NOT emergency-priority issue - a high-severity-by-impact, low-likelihood flaw requiring pre-existing local access. Treat it as a firmware patch to schedule (especially for high-value hosts where BIOS integrity matters) rather than an actively-exploited emergency. Note: input provides only a CVSS 4.0 vector and no CVSS 3.1 vector; the 7.2 reflects 4.0 scoring.

An attacker who already has a low-privileged local account (or local code execution) on a machine running AMI Aptio V firmware abuses the improper permission/privilege handling to escalate authorization at the firmware level, undermining BIOS integrity and system availability. No public exploit code was identified at the time of analysis, and exploitation requires local access - not remote delivery.