fkie_cve-2025-21194
Vulnerability from fkie_nvd
Published
2025-02-11 18:15
Modified
2025-07-08 14:14
Severity ?
Summary
Microsoft Surface Security Feature Bypass Vulnerability
References
URL | Tags | ||
---|---|---|---|
secure@microsoft.com | https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194 | Vendor Advisory |
Impacted products
{ "configurations": [ { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_1983_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "17896CFB-0B7D-456A-8A82-A971C3B5F072", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_1983:-:*:*:*:*:*:*:*", "matchCriteriaId": "8FBD2702-436C-4EB6-8F7F-4D65DFC9CCFA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F4FD9969-A47F-4F34-8775-07107C4B0557", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_go:-:*:*:*:*:*:*:*", "matchCriteriaId": "4751A72E-1E1A-455D-A179-F9936A9F87FA", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC33B563-7807-4AB3-8887-D228B1F60437", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E160CD9-BE19-4900-81E4-61BC6050215B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_2s_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "0373B077-9CDC-4D56-9180-53DD54D6C3D8", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_2s:-:*:*:*:*:*:*:*", "matchCriteriaId": "5126D18E-4EFC-43CF-8243-895034C8FADC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_pro_7\\+_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F9A5CB11-7AE2-47C0-A029-998B9C98E12E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_pro_7\\+:-:*:*:*:*:*:*:*", "matchCriteriaId": "D80D94B4-E68D-4DFF-A5AA-D6E183AC7579", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "F0D8F8A2-837E-452B-8AD2-BA2A511D5C18", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "9AD4AE51-45EE-43E8-ABC2-72E365354022", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_3_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DCE166FE-D173-4E62-8AA0-C80C0E4D8820", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_3:-:*:*:*:*:*:*:*", "matchCriteriaId": "EDAC37E4-8768-4207-A8B8-6D68D52AABF9", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_go_2_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FC33B563-7807-4AB3-8887-D228B1F60437", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_go_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E160CD9-BE19-4900-81E4-61BC6050215B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_pro_9_with_5g_1997_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CD49D37-90B1-4C07-83D6-80A3B60BFD93", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_pro_9_with_5g_1997:-:*:*:*:*:*:*:*", "matchCriteriaId": "384F730B-E216-4C4E-A95A-15D1F84613CC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_pro_9_with_5g_1996_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "23755029-6C52-4F4B-A4E0-C2CC810BAD2E", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_pro_9_with_5g_1996:-:*:*:*:*:*:*:*", "matchCriteriaId": "48465AD2-8B10-4185-8C1D-265E835584C4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_3_1867_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5805C772-1C4A-4A48-9394-00DBDAD7DEB6", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_3_1867:-:*:*:*:*:*:*:*", "matchCriteriaId": "7392E4DC-D40E-4F78-A086-F77C8AA9B452", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_3_1872_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "57C48B0F-2062-43DB-BAFD-C0C847DE1102", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_3_1872:-:*:*:*:*:*:*:*", "matchCriteriaId": "9E22D67D-CEE6-4F23-9B7D-25B5717F1817", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1958_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1DB5B208-C22B-4A1D-832C-29B693F35586", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1958:-:*:*:*:*:*:*:*", "matchCriteriaId": "2CD2054E-1098-4BEA-BA95-8430BF28192E", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1950_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5AA3D6B9-DD55-4CBD-A1E5-0737E3538A09", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1950:-:*:*:*:*:*:*:*", "matchCriteriaId": "D6C3A0E0-6485-411B-BC31-1A8A275CB034", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1952_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB6C780C-DDCE-447D-978C-57115EBBF4B9", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1952:-:*:*:*:*:*:*:*", "matchCriteriaId": "6110417B-F51F-42B3-95F9-AD7D6398FED3", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_laptop_4_1978_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EF2D920B-D1C3-4F79-AC91-14C3C61D7A0C", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_laptop_4_1978:-:*:*:*:*:*:*:*", "matchCriteriaId": "82E9E481-0326-4229-A8A7-84DE0D095425", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:windows_dev_kit_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3FDBEB11-868E-4176-9DA4-F0C9CEEA7CC2", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:windows_dev_kit:-:*:*:*:*:*:*:*", "matchCriteriaId": "85AD5792-45EA-48DD-8706-85841DDFB12F", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_3_50_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "EECA9AFD-5144-4B18-B4EF-DF1541FC9564", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_3_50:-:*:*:*:*:*:*:*", "matchCriteriaId": "3F56EC8E-E144-4D8F-B224-A7E6FA659437", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_pro_8_1983_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6E94C16E-94D9-4273-B8C8-BC57762F8367", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_pro_8_1983:-:*:*:*:*:*:*:*", "matchCriteriaId": "0A187D45-BB47-4667-ADFE-8B9E823F221B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_pro_8_for_business_with_lte_advanced_1982_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "B2C9AC0B-1A29-4D57-A26D-AE7B8120EB19", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_pro_8_for_business_with_lte_advanced_1982:-:*:*:*:*:*:*:*", "matchCriteriaId": "262D30D4-449E-47BB-9678-9F371B28DCF5", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_3_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "5A3A16E8-2056-4650-BE5C-30B84E2AB848", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_3_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "14066FEE-0F3B-4271-BC68-80ECD53DA4DC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_hub_2s_85_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "AF8F1CF9-94CF-4634-9851-65CF1C67A6AC", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_hub_2s_85:-:*:*:*:*:*:*:*", "matchCriteriaId": "A6D8102C-03E0-49E9-BA39-0F72E30C6304", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_3_1926_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "6CF69EC7-C430-48EA-8E4F-3C392D1AFCA3", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_3_1926:-:*:*:*:*:*:*:*", "matchCriteriaId": "E8EA8E7D-17E8-4E7A-B4A4-A208DC329FDB", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_3_1901_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "3CB6A413-CB85-4A53-B851-20CD13B93688", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_3_1901:-:*:*:*:*:*:*:*", "matchCriteriaId": "BD1750C1-2FDE-4A84-81D8-F57DE7E24974", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_3_2022_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "222EC78A-597B-4D14-BE1F-82102C0BB0B4", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_3_2022:-:*:*:*:*:*:*:*", "matchCriteriaId": "21C3A91A-3394-45DE-8932-5431EE8BFC99", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_2_1926_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "FA077CA3-7A69-4226-AAD8-2BC199961704", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_2_1926:-:*:*:*:*:*:*:*", "matchCriteriaId": "80BE3894-3006-48E4-8DE9-9B059A05DCC4", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_2_1901_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1CEF91B1-F29A-4F81-BAC9-6B93BBC5D749", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_2_1901:-:*:*:*:*:*:*:*", "matchCriteriaId": "1F33EDF2-9058-4329-BBF6-2FCE80433F5B", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" }, { "nodes": [ { "cpeMatch": [ { "criteria": "cpe:2.3:o:microsoft:surface_go_2_1927_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1549BEF0-C1C6-4D1A-9662-1FB6672DBF69", "vulnerable": true } ], "negate": false, "operator": "OR" }, { "cpeMatch": [ { "criteria": "cpe:2.3:h:microsoft:surface_go_2_1927:-:*:*:*:*:*:*:*", "matchCriteriaId": "32B48180-38CB-4C0E-BAF0-B99ACE575CFC", "vulnerable": false } ], "negate": false, "operator": "OR" } ], "operator": "AND" } ], "cveTags": [], "descriptions": [ { "lang": "en", "value": "Microsoft Surface Security Feature Bypass Vulnerability" }, { "lang": "es", "value": "Vulnerabilidad de omisi\u00f3n de funciones de seguridad de Microsoft Surface" } ], "id": "CVE-2025-21194", "lastModified": "2025-07-08T14:14:50.187", "metrics": { "cvssMetricV31": [ { "cvssData": { "attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1" }, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "secure@microsoft.com", "type": "Primary" } ] }, "published": "2025-02-11T18:15:30.820", "references": [ { "source": "secure@microsoft.com", "tags": [ "Vendor Advisory" ], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21194" } ], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Analyzed", "weaknesses": [ { "description": [ { "lang": "en", "value": "CWE-20" } ], "source": "secure@microsoft.com", "type": "Primary" }, { "description": [ { "lang": "en", "value": "NVD-CWE-noinfo" } ], "source": "nvd@nist.gov", "type": "Primary" } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…