What is the CVSS score of CVE-2025-7027?

CVE-2025-7027 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

How to fix or mitigate CVE-2025-7027?

Within 24 hours: Identify and inventory all affected systems using vulnerable SMI handlers; restrict physical and local access to at-risk machines; escalate to vendor for patch timeline. Within 7 days: Implement compensating controls including UEFI secure boot enforcement, SMM protection mechanisms, and disable SetupXtuBufferAddress NVRAM variable if operationally feasible. Within 30 days: Monitor vendor advisories for patch availability; conduct firmware integrity audits on critical systems; plan coordinated patching campaign once updates are released.

CVE-2025-7027

EUVD-2025-21141 HIGH

2025-07-11 cret@cert.org

Privilege Escalation

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 16, 2026 - 08:18 euvd

EUVD-2025-21141

Analysis Generated

Mar 16, 2026 - 08:18 vuln.today

CVE Published

Jul 11, 2025 - 16:15 nvd

HIGH 8.2

DescriptionCVE.org

A vulnerability in the Software SMI handler (SwSmiInputValue 0xB2) allows a local attacker to control both the read and write addresses used by the CommandRcx1 function. The write target is derived from an unvalidated UEFI NVRAM variable (SetupXtuBufferAddress), while the write content is read from an attacker-controlled pointer based on the RBX register. This dual-pointer dereference enables arbitrary memory writes within System Management RAM (SMRAM), leading to potential SMM privilege escalation and firmware compromise.