Improper Access Control in Advantech SUSI Driver Affects User Security

CVE-2025-14252

What is CVE-2025-14252?

An Improper Access Control issue in the Advantech SUSI driver (susi.sys) could allow malicious users to exploit this flaw to read and write arbitrary memory and I/O ports, as well as manipulate Model-Specific Registers (MSRs). This vulnerability may lead to unauthorized privilege escalation, arbitrary code execution, and leakage of sensitive information in affected systems running Advantech SUSI version 5.0.24335 and earlier.

References