CVE-2025-58770 HIGH

CVE-2025-58770: TCG2 TPM RT Not Locked Issue

Vendor Ami
Product AptioV
Weakness CWE-280
Published December 12, 2025
Last update December 12, 2025
View on NVD All CVEs

CVSS base score

7.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:H/SI:H/SA:H/E:P

What the vulnerability does

01Description

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability.

Key dates

02Disclosure timeline

December 12, 2025 CVE published
December 12, 2025 Record updated