CVE-2025-11901CWE-284broken-access-control

CVE-2025-11901

published December 17, 2025

CVSS
7.0
EPSS
0%
Percentile
12.7
In the wild
Unconfirmed
What it is

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA).

Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
7.0 · NONE
CVSS v4.0
Not supplied
EPSS
0.00227 · 12.7th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-12-17T10:16Z
References (1)
EPSS history
Timeline
  • 17 DEC 04:23Z
    An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690…
    cvelistv5