CVE-2025-54510

CVE-2025-54510 is a firmware vulnerability in AMD Secure Processor (ASP) affecting Zen 5-based processors that stems from missing lock verification in the firmware code. This vulnerability allows locally authenticated attackers with administrative privileges to manipulate MMIO (Memory-Mapped I/O) routing, potentially compromising the integrity of guest systems in virtualized environments. The vulnerability requires local access and administrative-level privileges, making it a lower-complexity attack requiring existing system compromise. While the CVSS score is not yet assigned, the moderate FAUCET Risk Score of 34.0 out of 100 and extremely low EPSS score of 0.00016 suggest limited overall exploitability across the vulnerability landscape. The impact is confined to guest system integrity rather than host-level compromise. CVE-2025-54510 does not currently appear in CISA's Known Exploited Vulnerabilities (KEV) catalog and is marked as inactive on the industry Hot List, indicating no evidence of active exploitation or widespread proof-of-concept code availability. Community attention remains minimal at this time, suggesting this remains a low-priority threat for immediate remediation efforts outside of affected Zen 5 deployments.