CVE-2025-11901
An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA). Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.
- Score
- CVSS 4.0 7.0 High
- Status
- Deferred - 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
- Published
- 2025-12-17
- Last modified
- 2026-10-07
- Weaknesses
- CWE-284
Affected products
- B460 Series (Asus)
- B560 Series (Asus)
- B660 Series (Asus)
- B760 Series (Asus)
- H410 Series (Asus)
- H470 Series (Asus)
- H510 Series (Asus)
- H610 Series (Asus)
- W480 Series (Asus)
- W680 Series (Asus)
- Z590 Series (Asus)
- Z690 Series (Asus)
- Z790 Series (Asus)
References
- https://www.asus.com/security-advisory/
