Vulnerability in ASUS B460 Series
CVE-2025-11901
An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA). Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.
Published · last modified .
EPSS exploit prediction
EPSS: 0.002 (12.1th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 12th percentile — 12.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- ASUS B460 Series — versions before 1805, 2002, 3002
- ASUS B560 Series — versions before 2402, 2803
- ASUS B660 Series — versions before 3810, 4501
- ASUS B760 Series — versions before 1825, 3102
- ASUS H410 Series — versions before 1805, 2002
- ASUS H470 Series — versions before 3002
- ASUS H510 Series — versions before 2402, 2803
- ASUS H610 Series — versions before 3810
- ASUS W480 Series — versions before 1002, 2603, 3302
- ASUS W680 Series — versions before 2015, 2701, 4501
Weakness classification (CWE)
References
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1 (vendor-advisory)