CVE-2025-27535
Exposed ioctl with insufficient access control in the firmware for some Intel(R) Ethernet Connection E825-C. before version NVM ver. 3.84 within Ring 0: Bare Metal OS may allow a denial of service. System software adversary with a privileged user combined with a high complexity attack may enable denial of service. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.6
- CVSS vector
- CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.10%
- CWE
- CWE-782
- Published
- 2026-02-10
- Last modified
- 2026-03-13
Affected products
- n/a Intel(R) Ethernet Connection E825-C.
Weakness type
Related vulnerabilities
- CVE-2026-16003 — Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to add...
- CVE-2026-16004 — Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read...
- CVE-2026-75809 — Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to...
- CVE-2026-80117 — PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary I/O Port Access via DirectIo64.sys
- CVE-2026-80116 — PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
- CVE-2026-80115 — PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Crash via DirectIo64.sys MSR Write IOCTL
- CVE-2026-80113 — PassMark PerformanceTest, BurnInTest, and OSForensics Arbitrary Bit Clear via DirectIo64.sys IOCTL
- CVE-2019-25764 — **UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC...