High severity · published Dec 17, 2025
CVE-2025-11901
An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680…
7.0
CVSS
0.2%
EPSS
No
On KEV
Description
An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610, H470, Z590, Z690, Z790, W480, W680 series chipsets. Exploitation requires physical access to internal expansion slots to install a specially crafted device and supporting software utility, and may lead to uncontrolled resource consumption that increases the risk of unauthorized direct memory access (DMA).
Refer to the 'Security Update for UEFI firmware' section on the ASUS Security Advisory for more information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 13% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
B460 series · ASUS
before 1805, 2002, 3002 · source: vendor
BS
B560 series · ASUS
before 2402, 2803 · source: vendor
BS
B660 series · ASUS
before 3810, 4501 · source: vendor
BS
B760 series · ASUS
before 1825, 3102 · source: vendor
HS
H410 series · ASUS
before 1805, 2002 · source: vendor
HS
H470 series · ASUS
before 3002 · source: vendor
HS
H510 series · ASUS
before 2402, 2803 · source: vendor
HS
H610 series · ASUS
before 3810 · source: vendor
WS
W480 series · ASUS
before 1002, 2603, 3302 · source: vendor
WS
W680 series · ASUS
before 2015, 2701, 4501 · source: vendor
ZS
Z590 series · ASUS
before 2402, 2803 · source: vendor
ZS
Z690 series · ASUS
before 3810, 4501 · source: vendor
