PT-2025-50217 · Unknown · Pci Express+1

Published 2025-12-09 · Updated 2025-12-11 · CVE-2025-9612

Positive Technologies (AI Summary)

CVSS v3.1

5.1

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PCI Express (PCIe) Integrity and Data Encryption (IDE) specification (affected versions not specified)

Description The PCI Express (PCIe) Integrity and Data Encryption (IDE) specification contains insufficient guidance regarding Transaction Layer Packet (TLP) ordering and tag uniqueness. This deficiency potentially allows encrypted packets to be replayed or reordered without detection. A local or physical attacker on the PCIe bus could exploit this to compromise data integrity protections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2025-9612

Affected Products

Pci Express

Pcie Integrity/Data Encryption

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-9612 · Security Note
• https://pcisig.com/PCIeIDEStandardVulnerabilities · Vendor Advisory
• https://kb.cert.org/vuls/id/404544 · Note
• https://t.me/true_secator/7712 · Telegram Post
• https://twitter.com/EUNOMATIX1/status/1998955190897226007 · Twitter Post
• https://twitter.com/CVEnew/status/1998732830877393123 · Twitter Post
• https://reddit.com/r/pwnhub/comments/1pjanv8/intel_and_amd_processors_vulnerable_to_pcie · Reddit Post
• https://reddit.com/r/SecOpsDaily/comments/1pj4sjz/three_pcie_encryption_weaknesses_expose_pcie_50 · Reddit Post
• https://pcisig.com/specifications · Note