Vulnerability in Asus B460 Series
CVE-2025-11901
An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA). Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.
EPSS: 0.002 (11.3th percentile) — read the EPSS interpretation.
Affected products
- Asus B460 Series — versions before 1805, 2002, 3002
- Asus B560 Series — versions before 2402, 2803
- Asus B660 Series — versions before 3810, 4501
- Asus B760 Series — versions before 1825, 3102
- Asus H410 Series — versions before 1805, 2002
- Asus H470 Series — versions before 3002
- Asus H510 Series — versions before 2402, 2803
- Asus H610 Series — versions before 3810
- Asus W480 Series — versions before 1002, 2603, 3302
- Asus W680 Series — versions before 2015, 2701, 4501
Weakness classification (CWE)
References
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1 (vendor-advisory)