CNNVD-202512-1135 Information

CNNVD ID

CNNVD-202512-1135

CVE-2025-9613

  • CNNVD Published: 2025-12-09

Description (Chinese)

PCI-SIG PCI Express Integrity and Data Encryption是美国PCI-SIG公司的一个数据加密软件。 PCI-SIG PCI Express Integrity and Data Encryption存在安全漏洞,该漏洞源于完成超时后标签重用指导不足,可能导致多个未完成的非发布请求共享相同标签。

Description (English)

PCI-SIG PCI Enterprises Information and Data Enrichption is a data encryption software for PCI-SIG in the United States. There is a security loophole in PCI-SIG PCI Applications Information and Data Encryption, which results from the completion of the timeout re-use guidance, which may lead to multiple uncompleted non-publication requests sharing the same label.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

PCI-SIG

Published

2025-12-09

Last Modified

2026-02-24

References

https://pcisig.com/specifications https://pcisig.com/PCIeIDEStandardVulnerabilities https://access.redhat.com/security/cve/cve-2025-9613

Patch

https://pcisig.com/PCIeIDEStandardVulnerabilities

Share on: