CVE-2025-11698
CriticalCVSS 9.2Summary
A denial-of-service vulnerability exists in boot firmware of 5380/5480/5580 controllers prior to version 1.072. It allows a malicious user to write invalid file data to the controller, causing a major non-recoverable fault (MNRF).
Risk Assessment
An attacker can permanently disable the controller, causing downtime in managed systems and requiring costly physical service intervention.
Recommendation
Immediately update the boot firmware of 5380/5480/5580 controllers to version 1.072 or later. Restrict physical and network access to these devices to trusted administrators only.
Original NVD description (English source)
A denial-of-service issue exists in 5380/5480/5580 controllers boot firmware lower than version 1.072. This vulnerability could potentially allow a malicious user to write invalid file data to the controller, causing the device to enter a major non-recoverable fault (MNRF).