ASUS System Control Interface control requests flaw allows full system compromise
Ordinary users on an ASUS control program can take over the whole PC.
Summary
An exposed control interface in ASUS System Control Interface lets a local, low-privileged user read and write arbitrary physical memory, which can fully compromise the system. Versions 3.1.66.0 through 3.1.69.0 are affected.
Affected when
- Local low-privileged user account
- ASUS System Control Interface 3.1.66.0 through 3.1.69.0
What to do
Check that the product runs a version newer than 3.1.69.0 and read ASUS's security advisory.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen