Log in Start free

Vulnerability · Published Dec 17, 2025 · Assigned by twcert

CVE-2025-14304ASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure

Medium 6.8

In plain English

A medium-severity security flaw in Intel 500 chipset motherboard from ASRock. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).

Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.4%top 70.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

Certain motherboard models developed by ASRock and its subsidiaries, ASRockRack and ASRockInd. has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.

Affected products (as reported)

VendorProductVersions
ASRock Intel 500 chipset motherboard 0
ASRockRack Intel 500 chipset motherboard 0
ASRockInd Intel 500 chipset motherboard 0
ASRock Intel 600 chipset motherboard 0
ASRockRack Intel 600 chipset motherboard 0
ASRockInd Intel 600 chipset motherboard 0
ASRock Intel 700 chipset motherboard 0
ASRockRack Intel 700 chipset motherboard 0
ASRockInd Intel 700 chipset motherboard 0
ASRock Intel 800 chipset motherboard 0
ASRockRack Intel 800 chipset motherboard 0
ASRockInd Intel 800 chipset motherboard 0

Weakness: CWE-693 · Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References