Skip to content
OpenAdvisories
High · 7.8 CVE-2025-14252 EUVD-2025-203500GHSA-fw62-2gpr-jghv

An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, an…

Published Dec 16, 2025 · Updated Jan 7, 2026 · Assigned by TXOne

Description

An Improper Access Control vulnerability in Advantech SUSI driver (susi.sys) allows attackers to read/write arbitrary memory, I/O ports, and MSRs, resulting in privilege escalation, arbitrary code execution, and information disclosure. This issue affects Advantech SUSI: 5.0.24335 and prior.

Affected products

VendorProductAffectedFixed
Advantech SUSI ≤ 5.0.24335 —

References