Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-20103

19
FAUCET Score

CVE-2025-20103 describes an insufficient resource pool vulnerability in the core management mechanism of certain Intel Processors, allowing an authenticated local user to potentially cause a denial of service. With a CVSS score of 6.5 (Medium), this vulnerability requires local access and low privileges, but does not involve user interaction, leading to a high impact on availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
N/AIntel(R) Processors
See referencesCNA affecteddefault unaffected

CVSS Data

CVSS version used by this source: 4.0

5.7MEDIUM

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
PRESENT
Privileges Required
LOW
User Interaction
NONE
VS Confidentiality
NONE
VS Integrity
NONE
VS Availability
HIGH
SS Confidentiality
NONE
SS Integrity
NONE
SS Availability
NONE
Exploit Maturity
NOT_DEFINED
CvssVersion
4.0

Exploit Intelligence

EPSS Score
0.14%
Probability of exploitation in next 30 days
EPSS Percentile
3.9%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0014 is in the 25th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (9)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
gcppatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: microcode_ctl
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: microcode_ctl
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: microcode_ctl
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 6Fixed in: microcode_ctl
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: microcode_ctl

Vendor Advisories (5)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
gcpllm-gcp-c9d11fcd968b37d0MEDIUM

Intel 2025.2 IPU - Processors May 2025 Security Update

May 27, 2025
redhatCVE-2025-20103Moderate

microcode_ctl: Insufficient resource pool in the core management mechanism

May 13, 2025

References

lists.debian.org / debian-lts-announce/2025/05/msg00021.html
intel.com / content/www/us/en/security-center/advisory/intel-sa-01244.html