---
cve: "CVE-2026-33197"
severity: "HIGH"
cvss: 8.7
epss: "12%"
vendor: "AMI"
kev: false
exploited: false
published: "2026-09-08 15:18:42"
tags: [cve, security, high]
source: tsecurity.de CVE-Dossier
exported: "2026-09-19T10:26:21+02:00"
---

# CVE-2026-33197

> 8.7 HIGH

## Beschreibung

AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Incomplete List of Disallowed Inputs” by local access. Successful exploitation of this vulnerability may lead to arbitrary code execution and impact system Confidentiality, Integrity, and Availability.

## CVSS-Vektor

```
CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |

## Referenzen

- <https://go.ami.com/hubfs/Security%20Advisories/2026/AMI-SA-2026001.pdf>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2026-33197) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_