CVE-2025-9612

Katalog CVE

CVSS 5.1 · Medium EPSS 0,14%

Kerentanan pada pcisig pci express integrity and data encryption. Skor CVSS 3.1 5.1 (Medium) menurut CISA ADP.

Deskripsi (NVD)

An issue was discovered in the PCI Express (PCIe) Integrity and Data Encryption (IDE) specification, where insufficient guidance on Transaction Layer Packet (TLP) ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical attackers on the PCIe bus to violate data integrity protections.

Rincian

Terbit di NVD

9 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.1 (Medium), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

0,14% peluang dieksploitasi; lebih tinggi dari 2,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pcisig.com/PCIeIDEStandardVulnerabilities advisory vendor
• https://kb.cert.org/vuls/id/404544 advisory pihak ketiga
• https://pcisig.com/specifications product