A vulnerability was found in Insyde H2O up to 5.7. It has been rated as critical. This issue affects some unknown processing of the component Attached efi File Handler. The manipulation leads to improper certificate validation.
The identification of this vulnerability is CVE-2025-4275. The attack needs to be approached locally. There is no exploit available.
