{"id":"CVE-2025-14304","state":"PUBLISHED","title":"ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure","description":"Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.","publishedAt":"2025-12-17T03:23:24.677Z","updatedAt":"2025-12-17T21:30:16.815Z","severity":{"score":7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"twcert"},"assigner":"twcert","products":["ASRock Intel 500 chipset motherboard","ASRockRack Intel 500 chipset motherboard","ASRockInd Intel 500 chipset motherboard","ASRock Intel 600 chipset motherboard","ASRockRack Intel 600 chipset motherboard","ASRockInd Intel 600 chipset motherboard","ASRock Intel 700 chipset motherboard","ASRockRack Intel 700 chipset motherboard","ASRockInd Intel 700 chipset motherboard","ASRock Intel 800 chipset motherboard","ASRockRack Intel 800 chipset motherboard","ASRockInd Intel 800 chipset motherboard"],"affected":[{"vendor":"ASRock","product":"Intel 500 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 500 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 500 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRock","product":"Intel 600 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 600 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 600 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRock","product":"Intel 700 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 700 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 700 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRock","product":"Intel 800 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 800 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 800 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]}],"references":["https://www.twcert.org.tw/tw/cp-132-10578-c43b4-1.html","https://www.twcert.org.tw/en/cp-139-10579-9205b-2.html","https://www.asrock.com/support/Security.asp","https://www.asrockind.com/zh-tw/security-center"],"weaknesses":["CWE-693"],"ingestedAt":"2026-10-29T20:08:31.050Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/14xxx/CVE-2025-14304.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-14304","state":"PUBLISHED","datePublished":"2025-12-17T03:23:24.677Z","dateUpdated":"2025-12-17T21:30:16.815Z","assignerShortName":"twcert","assignerOrgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateReserved":"2025-12-09T06:37:46.607Z"},"containers":{"cna":{"title":"ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure","descriptions":[{"lang":"en","value":"Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded."}],"affected":[{"vendor":"ASRock","product":"Intel 500 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 500 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 500 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRock","product":"Intel 600 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 600 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 600 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRock","product":"Intel 700 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 700 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 700 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRock","product":"Intel 800 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockRack","product":"Intel 800 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]},{"vendor":"ASRockInd","product":"Intel 800 chipset motherboard","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected"}]}],"references":[{"url":"https://www.twcert.org.tw/tw/cp-132-10578-c43b4-1.html","tags":["third-party-advisory"]},{"url":"https://www.twcert.org.tw/en/cp-139-10579-9205b-2.html","tags":["third-party-advisory"]},{"url":"https://www.asrock.com/support/Security.asp","tags":["vendor-advisory"]},{"url":"https://www.asrockind.com/zh-tw/security-center","tags":["vendor-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"PHYSICAL","baseScore":7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.8,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-693","description":"CWE-693 Protection Mechanism Failure","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"twcert","orgId":"cded6c7f-6ce5-4948-8f87-aa7a3bbb6b0e","dateUpdated":"2025-12-17T03:23:24.677Z"},"datePublic":"2025-12-17T03:15:00.000Z","impacts":[{"capecId":"CAPEC-401","descriptions":[{"lang":"en","value":"CAPEC-401 Physically Hacking Hardware"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Please update firmware to latest version."}],"value":"Please update firmware to latest version."}],"source":{"advisory":"TVN-202512005","discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.5.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-12-17T21:30:01.201599Z","id":"CVE-2025-14304","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-12-17T21:30:16.815Z"}}]}}}