5.6Medium

CVE-2026-15030

ASUS System Control Interface v3; ASUS System Control Interface; ASUS Business Manager Published: (4 months ago)

Description

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security Update for ASUS System Control Interface  ' section on the ASUS Security Advisory for more information.

Weakness (CWE): CWE-125

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
ASUS Business Manager through v3.0.38.0
ASUS System Control Interface before v1.1.40.0
ASUS System Control Interface v3 before v3.1.65.0

References and patches