← CVE Radar
CVE-2025-47827IGEL OS Use of a Key Past its Expiration Date Vulnerability
In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.
4.6 MEDIUMEPSS 5.15%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 4.6 | MEDIUM | 3.1CISA-ADP | CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
CISA required action
⚡ Known exploited · remediation due Nov 4, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2025-47827
- Status
- Analyzed
- Assigner (CNA)
- mitre
- Published
- Jun 5, 2025
- Last modified
- 2026-06-17 09:28 UTC
Affected Products
From NVD CPE configurations.
igeligel os1 version range
- before 11.01.100
microsoftwindows 10 15071 version range
- before 10.0.10240.21161
microsoftwindows 10 16071 version range
- before 10.0.14393.8519
microsoftwindows 10 18091 version range
- before 10.0.17763.7919
microsoftwindows 10 21h21 version range
- before 10.0.19044.6456
microsoftwindows 10 22h21 version range
- before 10.0.19045.6456
microsoftwindows 11 22h21 version range
- before 10.0.22621.6060
microsoftwindows 11 23h21 version range
- before 10.0.22631.6060
microsoftwindows 11 24h21 version range
- before 10.0.26100.6899
microsoftwindows 11 25h21 version range
- before 10.0.26200.6899
microsoftwindows server 20121 version range
- r2
microsoftwindows server 20161 version range
- before 10.0.14393.8519
microsoftwindows server 20191 version range
- before 10.0.17763.7919
microsoftwindows server 20221 version range
- before 10.0.20348.4294
microsoftwindows server 2022 23h21 version range
- before 10.0.25398.1913
microsoftwindows server 20251 version range
- before 10.0.26100.6899