CVE-2025-14252

Advantech / SUSI PUBLISHED

Description (CNA)

An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior.

Affected (CNA)

Vendor / product	Versions
Advantech / SUSI	affected 0 through 5.0.24335

CWE

No CWE identifiers supplied.

References

https://www.txone.com/psirt/advisories/CVE-2025-14252

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.