Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-42455

Опубликовано: 15 фев. 2023
Источник: nvd
CVSS3: 7.8
EPSS Низкий

Описание

ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:asus:armoury_crate:*:*:*:*:*:*:*:*
Версия до 5.3.4.1 (исключая)

EPSS

Процентиль: 10%
0.00034
Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-269

Связанные уязвимости

CVSS3: 7.8
github
почти 3 года назад

ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges.

EPSS

Процентиль: 10%
0.00034
Низкий

7.8 High

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-269