CNNVD-202512-3314 Information

CNNVD ID

CNNVD-202512-3314

CVE-2025-14304

  • CNNVD Published: 2025-12-17

Description (Chinese)

ASRock Motherboards是中国台湾华擎(ASRock)公司的一系列主板。 ASRock Motherboards存在安全漏洞,该漏洞源于未正确启用IOMMU,可能导致未经身份验证的物理攻击者在操作系统内核及其安全功能加载前读写任意物理内存。以下产品受到影响:Intel 500 chipset motherboard、Intel 600 chipset motherboard和Intel 700 chipset motherboard。

Description (English)

ASRock Mortherboards is the main board of ASRock. There is a security loophole in ASRock Motherboards, which stems from the incorrect activation of IOMMU, which could lead to the reading and writing of any physical memory of unidentified physical assailants before their nuclear and their safety features are loaded in the operating system. The following products were affected: Intel 500 children motherboard, Intel 600 children motherboard and Intel 700 children motherboard.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

华擎

Published

2025-12-17

Last Modified

2026-02-24

References

https://www.asrock.com/support/Security.asp https://www.asrockind.com/zh-tw/security-center https://www.twcert.org.tw/en/cp-139-10579-9205b-2.html https://www.twcert.org.tw/tw/cp-132-10578-c43b4-1.html

Patch

https://www.asrockind.com/zh-tw/index.php?route=newsblog/security&security_id=3

Share on: