CVE-2025-6177 - Vulnerability Details - OpenCVE

Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP).

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://issues.chromium.org/issues/b/382540412
https://issuetracker.google.com/issues/382540412

History

Mon, 16 Jun 2025 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-269
Metrics		cvssV3_1 `{'score': 7.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 16 Jun 2025 17:00:00 +0000

Type	Values Removed	Values Added
Description		Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP).
Title		ChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked
References		https://issues.chromium.org/issues/b/382540412 https://issuetracker.google.com/issues/382540412

MITRE

Status: PUBLISHED

Assigner: ChromeOS

Published: 2025-06-16T16:43:44.191Z

Updated: 2025-06-17T03:55:13.297Z

Reserved: 2025-06-16T16:30:47.684Z

Link: CVE-2025-6177

Vulnrichment

Updated: 2025-06-16T18:02:47.009Z

NVD

Status : Awaiting Analysis

Published: 2025-06-16T17:15:31.813

Modified: 2025-06-17T20:50:23.507

Link: CVE-2025-6177

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-6177", "assignerOrgId": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f", "state": "PUBLISHED", "assignerShortName": "ChromeOS", "dateReserved": "2025-06-16T16:30:47.684Z", "datePublished": "2025-06-16T16:43:44.191Z", "dateUpdated": "2025-06-17T03:55:13.297Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "ChromeOS", "defaultStatus": "unaffected", "versions": [{"version": "16063.45.2", "status": "affected", "versionType": "custom"}]}], "title": "ChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked", "descriptions": [{"lang": "en", "value": "Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP)."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Privilege Escalation"}]}], "providerMetadata": {"orgId": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f", "shortName": "ChromeOS", "dateUpdated": "2025-06-16T16:43:44.191Z"}, "references": [{"url": "https://issuetracker.google.com/issues/382540412"}, {"url": "https://issues.chromium.org/issues/b/382540412"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-269", "lang": "en", "description": "CWE-269 Improper Privilege Management"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-06-16T00:00:00+00:00", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2025-6177"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-17T03:55:13.297Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-6177", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-06-16T18:02:28.334439Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-269", "description": "CWE-269 Improper Privilege Management"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-16T18:02:47.009Z"}}], "cna": {"title": "ChromeOS MiniOS Root Code Execution Bypass While Dev Mode Blocked", "affected": [{"vendor": "Google", "product": "ChromeOS", "versions": [{"status": "affected", "version": "16063.45.2", "versionType": "custom"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://issuetracker.google.com/issues/382540412"}, {"url": "https://issues.chromium.org/issues/b/382540412"}], "descriptions": [{"lang": "en", "value": "Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debug shell (VT3 console) accessible through specific key combinations during developer mode entry and MiniOS access, even when developer mode is blocked by device policy or Firmware Write Protect (FWMP)."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Privilege Escalation"}]}], "providerMetadata": {"orgId": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f", "shortName": "ChromeOS", "dateUpdated": "2025-06-16T16:43:44.191Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6177", "state": "PUBLISHED", "dateUpdated": "2025-06-17T03:55:13.297Z", "dateReserved": "2025-06-16T16:30:47.684Z", "assignerOrgId": "7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f", "datePublished": "2025-06-16T16:43:44.191Z", "assignerShortName": "ChromeOS"}, "dataVersion": "5.1"}