CVE-2025-47827 — MEDIUM (4.6)

Q: How severe is CVE-2025-47827?

CVE-2025-47827 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2025-47827?

Check the references section above for vendor advisories and patch information. Affected products include: Igel Igel Os, Microsoft Windows 10 1507, Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows 10 21H2.

Vulnerability Description

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

HIGH

Affected Products

Vendor	Product	Versions
Igel	Igel Os	< 11.01.100
Microsoft	Windows 10 1507	< 10.0.10240.21161
Microsoft	Windows 10 1607	< 10.0.14393.8519
Microsoft	Windows 10 1809	< 10.0.17763.7919
Microsoft	Windows 10 21H2	< 10.0.19044.6456
Microsoft	Windows 10 22H2	< 10.0.19045.6456
Microsoft	Windows 11 22H2	< 10.0.22621.6060
Microsoft	Windows 11 23H2	< 10.0.22631.6060
Microsoft	Windows 11 24H2	< 10.0.26100.6899
Microsoft	Windows 11 25H2	< 10.0.26200.6899
Microsoft	Windows Server 2012	-
Microsoft	Windows Server 2016	< 10.0.14393.8519
Microsoft	Windows Server 2019	< 10.0.17763.7919
Microsoft	Windows Server 2022	< 10.0.20348.4294
Microsoft	Windows Server 2022 23H2	< 10.0.25398.1913
Microsoft	Windows Server 2025	< 10.0.26100.6899

Related Weaknesses (CWE)

CWE-347

References

https://github.com/Zedeldi/CVE-2025-47827ExploitThird Party Advisory
https://github.com/Zedeldi/igelfsProduct
https://github.com/Zedeldi/CVE-2025-47827ExploitThird Party Advisory
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-47827Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-US Government Resource

FAQ

What is CVE-2025-47827?

CVE-2025-47827 is a vulnerability with a CVSS score of 4.6 (MEDIUM). In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unver...

How severe is CVE-2025-47827?

CVE-2025-47827 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-47827?

Check the references section above for vendor advisories and patch information. Affected products include: Igel Igel Os, Microsoft Windows 10 1507, Microsoft Windows 10 1607, Microsoft Windows 10 1809, Microsoft Windows 10 21H2.