CVE-2025-3052

HIGH

DT Research BiosFlashShell 80.02 and Dtbios 70.17-70.22/71.17-71.22 - Arbitrary Memory Write via UEFI Firmware

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2025-3052. PoCs published by TheMalwareGuardian.

AI-analyzed exploit summary This repository provides a detailed technical reproduction of CVE-2025-3052, a UEFI Secure Boot bypass vulnerability in DT Research firmware. The PoC includes vulnerable binary emulation, exploitation explanation, and NVRAM variable manipulation to achieve arbitrary memory writes via the IhisiParamBuffer NVRAM variable.

Description

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

Exploits (1)

nomisec WORKING POC

by TheMalwareGuardian · poc

https://github.com/TheMalwareGuardian/CVE-2025-3052

View Code ZIP pw:eip

This repository provides a detailed technical reproduction of CVE-2025-3052, a UEFI Secure Boot bypass vulnerability in DT Research firmware. The PoC includes vulnerable binary emulation, exploitation explanation, and NVRAM variable manipulation to achieve arbitrary memory writes via the IhisiParamBuffer NVRAM variable.

Classification

Working Poc 98%

Attack Type

Auth Bypass

Complexity

Moderate

Reliability

Reliable

Target: DT Research firmware (Dtbios-efi64-71.22.efi)

No auth needed

Prerequisites: Physical or virtual machine with UEFI firmware access · Ability to modify NVRAM variables · EDK2 build environment for compilation

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1078 - Valid Accounts

mistral-large-3 · analyzed Aug 05, 2026 Full analysis →

References (3)

Core 3

Core References

Various Sources

https://uefi.org/specs/UEFI/2.10/32_Secure_Boot_and_Driver_Signing.html

Various Sources

https://www.binarly.io/advisories/brly-dva-2025-001

Third Party Advisory, US Government Resource

https://www.kb.cert.org/vuls/id/806555

Scores

CVSS v3 8.2

EPSS 0.0039

EPSS Percentile 31.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

Status published

Products (14)

DT Research/BiosFlashShell 80.02

DT Research/BiosFlashShell 81.02

DT Research/Dtbios 70.17

DT Research/Dtbios 70.18

DT Research/Dtbios 70.19

DT Research/Dtbios 70.20

DT Research/Dtbios 70.21

DT Research/Dtbios 70.22

DT Research/Dtbios 71.17

DT Research/Dtbios 71.18

... and 4 more

Published Jun 10, 2025

Tracked Since Feb 18, 2026