CVE-2025-20034

Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days.

Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003 may allow a privileged user to potentially enable information disclosure via local access.

Published 2025-05-13. Last modified 2026-06-17.