CVE-2025-14304: falha de alta gravidade em ASRock Intel 500 chipset motherboard
ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7epss 0.4%
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
ASRock · Intel 500 chipset motherboardASRock · Intel 600 chipset motherboardASRock · Intel 700 chipset motherboardASRock · Intel 800 chipset motherboardASRockInd · Intel 500 chipset motherboardASRockInd · Intel 600 chipset motherboardASRockInd · Intel 700 chipset motherboardASRockInd · Intel 800 chipset motherboardASRockRack · Intel 500 chipset motherboardASRockRack · Intel 600 chipset motherboardASRockRack · Intel 700 chipset motherboardASRockRack · Intel 800 chipset motherboard