What’s Vulnerable › Vulnerabilities

CVE-2025-14252

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-16 · updated 2026-10-07
• Weakness: CWE-269

Description

An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior.

Affected products

• Advantech SUSI: through 5.0.24335

References

• https://www.txone.com/psirt/advisories/CVE-2025-14252

Get alerted when CVE-2025-14252 or the next vulnerability affects your stack