CVE-2025-45512
MEDIUMDenx U-boot - Command Injection
Title source: ruleDescription
A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.
Exploits (1)
nomisec
WORKING POC
1 stars
by AzhariRamadhan · poc
https://github.com/AzhariRamadhan/CVE-2025-45512
Scores
CVSS v3
6.5
EPSS
0.0016
EPSS Percentile
36.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
total
Details
CWE
CWE-77
Status
published
Products (1)
denx/u-boot
1.1.3
Published
Aug 05, 2025
Tracked Since
Feb 18, 2026