Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2025-11901

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 serie

Description

An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA). Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS B460 series

Default version status: unaffected

  • before 1805, 2002, 3002affected

ASUS B560 series

Default version status: unaffected

  • before 2402, 2803affected

ASUS B660 series

Default version status: unaffected

  • before 3810, 4501affected

ASUS B760 series

Default version status: unaffected

  • before 1825, 3102affected

ASUS H410 series

Default version status: unaffected

  • before 1805, 2002affected

ASUS H470 series

Default version status: unaffected

  • before 3002affected

ASUS H510 series

Default version status: unaffected

  • before 2402, 2803affected

ASUS H610 series

Default version status: unaffected

  • before 3810affected

ASUS W480 series

Default version status: unaffected

  • before 1002, 2603, 3302affected

ASUS W680 series

Default version status: unaffected

  • before 2015, 2701, 4501affected

ASUS Z590 series

Default version status: unaffected

  • before 2402, 2803affected

ASUS Z690 series

Default version status: unaffected

  • before 3810, 4501affected

ASUS Z790 series

Default version status: unaffected

  • before 1825, 2102, 3102affected

References