{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1542.001 System Firmware","home_page_url":"https://patchfirst.co/technique/T1542.001/","feed_url":"https://patchfirst.co/feed/technique/T1542.001.json","description":"New and newly exploited CVEs that lead to ATT&CK T1542.001 System Firmware, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2025-47827#kev","url":"https://patchfirst.co/cve/CVE-2025-47827/","title":"[KEV] CVE-2025-47827: IGEL OS Use of a Key Past its Expiration Date Vulnerability","content_text":"IGEL · IGEL OS. In CISA KEV since 2025-10-14. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 4.6 MEDIUM. Public exploit code exists. ATT&CK: T1542 Pre-OS Boot; T1542.001 System Firmware. Priority 64.6 of 100.","summary":"IGEL OS Use of a Key Past its Expiration Date Vulnerability","date_published":"2025-10-14T00:00:00.000Z","date_modified":"2026-06-17T09:28:44.000Z","tags":["kev","public-exploit","T1542","T1542.001"],"_patchfirst":{"reason":"kev","priority":64.6,"kev":{"dateAdded":"2025-10-14","ransomware":false},"epss":{"score":0.04927,"percentile":0.92121},"cvss":{"score":4.6,"severity":"MEDIUM","version":"3.1"},"vendor":"IGEL","product":"IGEL OS","techniqueIds":["T1542","T1542.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2019-1736","url":"https://patchfirst.co/cve/CVE-2019-1736/","title":"CVE-2019-1736: Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability","content_text":"Cisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 0.2% (higher than 16% of CVEs). CVSS 6.2 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 7.5 of 100.","summary":"Multiple Cisco UCS-Based Products UEFI Secure Boot Bypass Vulnerability","date_published":"2020-09-23T00:00:00.000Z","date_modified":"2024-11-13T18:05:16.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":7.5,"kev":null,"epss":{"score":0.00247,"percentile":0.16002},"cvss":{"score":6.2,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Identity Services Engine Software","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5379","url":"https://patchfirst.co/cve/CVE-2020-5379/","title":"CVE-2020-5379: Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability","content_text":"Dell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.9% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.5 of 100.","summary":"Dell Inspiron 7352 BIOS versions prior to A12 contain a UEFI BIOS Boot Services overwrite vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-16T19:30:42.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":11.5,"kev":null,"epss":{"score":0.00397,"percentile":0.33852},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"CPG BIOS","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5376","url":"https://patchfirst.co/cve/CVE-2020-5376/","title":"CVE-2020-5376: Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability","content_text":"Dell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.","summary":"Dell Inspiron 7347 BIOS versions prior to A13 contain a UEFI BIOS Boot Services overwrite vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-16T22:55:30.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":11.4,"kev":null,"epss":{"score":0.0039,"percentile":0.33136},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"CPG BIOS","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5378","url":"https://patchfirst.co/cve/CVE-2020-5378/","title":"CVE-2020-5378: Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability","content_text":"Dell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.","summary":"Dell G7 17 7790 BIOS versions prior to 1.13.2 contain a UEFI BIOS Boot Services overwrite vulnerability","date_published":"2020-09-02T00:00:00.000Z","date_modified":"2024-09-17T01:51:46.000Z","tags":["T1542.001"],"_patchfirst":{"reason":"published","priority":11.4,"kev":null,"epss":{"score":0.0039,"percentile":0.33136},"cvss":{"score":6.8,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"CPG BIOS","techniqueIds":["T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2020-5326","url":"https://patchfirst.co/cve/CVE-2020-5326/","title":"CVE-2020-5326: Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…","content_text":"Dell · Dell Client Consumer and Commercial Platforms. Not in CISA KEV. EPSS 0.3% (higher than 28.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1542.001 System Firmware. Priority 10.0 of 100.","summary":"Affected Dell Client platforms contain a BIOS Setup configuration authentication bypass vulnerability in the pre-boot…","date_published":"2020-02-21T00:00:00.000Z","date_modified":"2024-09-17T01:56:45.000Z","tags":["T1068","T1542.001"],"_patchfirst":{"reason":"published","priority":10,"kev":null,"epss":{"score":0.00349,"percentile":0.2858},"cvss":{"score":6.1,"severity":"MEDIUM","version":"3.1"},"vendor":"Dell","product":"Dell Client Consumer and Commercial Platforms","techniqueIds":["T1068","T1542.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}