> For the complete documentation index, see [llms.txt](https://support.onlogic.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://support.onlogic.com/support-articles/security-advisories/ol-2025-090102.md).

# OL 2025 090102

**Description:**

Fix several critical vulnerabilities of specified BIOS versions, preventing damage from those vulnerabilities being exploited.

**OnLogic Security Advisory ID:** OL-2025-090102

**Type:** Advisory

**Fixed Vulnerabilities:**

| **Vulnerability**                              | **Description**                                                   | **CVSS Base Score** | **CVSS Vector String**              | **Found version** | **Fixed version** |
| ---------------------------------------------- | ----------------------------------------------------------------- | ------------------- | ----------------------------------- | ----------------- | ----------------- |
| CVE-2014-3686                                  | Found and fixed unsafe code flow                                  | 6.8                 | AV:N/AC:M/Au:N/C:P/I:P/A:P          | D7870A13          | N7870A01          |
| CVE-2015-0210                                  | Found and fixed unsafe code flow                                  | 5.9                 | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N | D7870A13          | N7870A01          |
| CVE-2015-1863                                  | Found and fixed unsafe code flow                                  | 5.8                 | AV:A/AC:L/Au:N/C:P/I:P/A:P          | D7870A13          | N7870A01          |
| CVE-2015-4141                                  | Found and fixed unsafe code flow                                  | 4.3                 | AV:N/AC:M/Au:N/C:N/I:N/A:P          | D7870A13          | N7870A01          |
| CVE-2015-4142                                  | Found and fixed unsafe code flow                                  | 4.3                 | V:N/AC:M/Au:N/C:N/I:N/A:P           | D7870A13          | N7870A01          |
| CVE-2015-4143                                  | Found and fixed unsafe code flow                                  | 5                   | AV:N/AC:L/Au:N/C:N/I:N/A:P          | D7870A13          | N7870A01          |
| CVE-2015-4144                                  | Found and fixed unsafe code flow                                  | 5                   | AV:N/AC:L/Au:N/C:N/I:N/A:P          | D7870A13          | N7870A01          |
| CVE-2015-4145                                  | Found and fixed unsafe code flow                                  | 5                   | AV:N/AC:L/Au:N/C:N/I:N/A:P          | D7870A13          | N7870A01          |
| CVE-2015-4146                                  | Found and fixed unsafe code flow                                  | 5                   | AV:N/AC:L/Au:N/C:N/I:N/A:P          | D7870A13          | N7870A01          |
| BRLY-2022-009,BRLY-2023-021                    | Found and fixed vulnerability for potential risk during PEI phase | 8.2                 | AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H | D7870A13          | N7870A01          |
| BRLY-2022-160                                  | Found and fixed unsafe code flow                                  | 6                   | AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N | D7870A13          | N7870A01          |
| PKfail                                         | Untrusted Platform Key (PK) identified (PKfail)                   | N/A                 |                                     | D7870A13          | N7870A01          |
| BRLY-LOGOFAIL-2023-013, BRLK-LOGOFAIL-2023-021 | Found and fixed unsafe code flow                                  | 6                   | AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H | D7870A13          | N7870A01          |

**First Public Date:** 2025/03/11

**Last Update Date:** 2025/03/11

**Affected Products:**

* [CL250 by OnLogic](https://www.onlogic.com/store/cl250/)

Update BIOS version to N7870A01

{% hint style="info" %}
[Subscribe to security updates](https://share.hsforms.com/1c75WyGZgQ6yNzsRyUco9KQc0zha)
{% endhint %}
