VULNERABILITY INTELLIGENCE

CVE-2025-9612

CVSS score5.1 MEDIUM
EPSS probability0.14%
CISA KEVNot currently listed
Published2025-12-09
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical attackers on the PCIe bus to violate data integrity protections.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references