← Database

CVE-2025-14252

HIGH CVSS: 7.8 Published: 2025-12-16 Modified: 2026-06-17

Description

An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior.

Affected Platforms

Unknown

Weakness Type

CWE-269

References