nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2025-14252 CVE-2025-14252
HIGH
Record summary
CVE-2025-14252 has a selected CVSS score of 8.5 (high).
Description
An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior.
Description source: CVE List
Exploitation context
CISA SSVC decision
ExploitationNone
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Dec 16, 2025 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Default status: unaffected | CVE List | Through 5.0.24335 | affected |
References
2txone.com
https://www.txone.com/psirt/advisories/CVE-2025-14252