← back
CVE-2025-14303

MSI｜Motherboard - Protection Mechanism Failure

CVSS 7 HIGHEPSS 0.3%CWE-693
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
17 Dec 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Certain motherboard models developed by MSI has a Protection Mechanism Failure vulnerability. Because IOMMU was not properly enabled, unauthenticated physical attackers can use a DMA-capable PCIe device to read and write arbitrary physical memory before the OS kernel and its security features are loaded.
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
MSI · Intel 600 chipset motherboardMSI · Intel 700 chipset motherboard

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://csr.msi.com/global/product-security-advisorieshttps://www.twcert.org.tw/en/cp-139-10577-3cd58-2.htmlhttps://www.twcert.org.tw/tw/cp-132-10576-0a0fd-1.html