VULNERABILITY INTELLIGENCE
CVE-2025-14304
CVSS score6.8 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2025-12-17
Last modified2026-10-07
CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
Weakness classification
- twcert@cert.org.tw: CWE-693