8.4Hoch

CVE-2026-15029

ASUS System Control Interface v3; ASUS System Control Interface; ASUS Business Manager Veröffentlicht: (vor 3 Monaten)

Beschreibung

Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections. Refer to the '  Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Schwachstellentyp (CWE): CWE-822

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
ASUS Business Manager through v3.0.38.0
ASUS System Control Interface before v1.1.40.0
ASUS System Control Interface v3 before v3.1.65.0

Referenzen und Patches