grub2 allowed attackers with access to the grub shell to access files on the encrypted disks.
CVSS Details
- CVSS 4.0 Base Score: 7 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Huawei Euleros 2_0_sp10 | — | Upgrade grub2-commonUpgrade grub2-efi-x64-modulesUpgrade grub2-tools-extraUpgrade grub2-pc-modulesUpgrade grub2-pcUpgrade grub2-tools-efiUpgrade grub2-efi-x64Upgrade grub2-toolsUpgrade grub2-tools-minimal | Jul 11, 2025 | Nov 13, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade grub2-toolsUpgrade grub2-commonUpgrade grub2-tools-extraUpgrade grub2-efi-aa64Upgrade grub2-tools-minimalUpgrade grub2-efi-aa64-modules | Jun 13, 2025 | Nov 13, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade grub2-commonUpgrade grub2-efi-aa64Upgrade grub2-toolsUpgrade grub2-efi-aa64-modulesUpgrade grub2-tools-minimalUpgrade grub2-tools-extra | Jun 11, 2025 | Nov 13, 2024 |
| Huawei Euleros 2_0_sp13 | — | Upgrade grub2-efi-aa64Upgrade grub2-commonUpgrade grub2-tools-extraUpgrade grub2-efi-aa64-modulesUpgrade grub2-tools-minimalUpgrade grub2-tools | Aug 13, 2025 | Jun 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub