Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jv98-ppxj-hj8j

Опубликовано: 12 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.8

Описание

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

EPSS

Процентиль: 1%
0.00099
Низкий

6.8 Medium

CVSS4

Дефекты

CWE-732

Связанные уязвимости

nvd
5 месяцев назад

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

CVSS3: 5.5
fstec
5 месяцев назад

Уязвимость драйвера ASUS Business System Control Interface, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 1%
0.00099
Низкий

6.8 Medium

CVSS4

Дефекты

CWE-732