CVE-2025-46750
Medium
Description
SEL BIOS packages prior to 1.3.49152.117 or 2.6.49152.98 allow a local attacker to bypass password authentication and change password-protected BIOS settings by importing a BIOS settings file with no password set.
SeverityMedium
CVSS4.4
Exploit probability7. percentile0.2%
ProductSEL-3350-1
PublishedMay 12, 2025
First seenMay 12, 2025
Weakness typeCWE-305CWE-305
How to fix
Update
- Schweitzer Engineering Laboratories SEL-3350-11.3.49152.117 or later
- Schweitzer Engineering Laboratories SEL-3355-22.6.49152.98 or later
- Schweitzer Engineering Laboratories SEL-3360-22.6.49152.98 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Schweitzer Engineering Laboratories SEL-3350-1 | v < 1.3.49152.117 | 1.3.49152.117 |
| Schweitzer Engineering Laboratories SEL-3355-2 | v < 2.6.49152.98 | 2.6.49152.98 |
| Schweitzer Engineering Laboratories SEL-3360-2 | v < 2.6.49152.98 | 2.6.49152.98 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.