CVE-2025-11901: High severity ASUS UEFI firmware vulnerability
An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA). Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11901?
CVE-2025-11901 has a high severity rating of 7.
What is CVE-2025-11901 related to?
CVE-2025-11901 is an uncontrolled resource consumption vulnerability affecting certain ASUS motherboards with specific Intel chipsets.
How does exploitation of CVE-2025-11901 occur?
Exploitation of CVE-2025-11901 requires physical access to the internal expansion slots to install a specially crafted device.
What impact does CVE-2025-11901 pose?
CVE-2025-11901 could allow an attacker to consume resources uncontrollably on affected ASUS motherboards.
How can I mitigate the risks associated with CVE-2025-11901?
Mitigation for CVE-2025-11901 involves restricting physical access to affected motherboard models to prevent exploitation.