Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-15037

Опубликовано: 12 мар. 2026
Источник: nvd
EPSS Низкий

Описание

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

EPSS

Процентиль: 1%
0.00099
Низкий

Дефекты

CWE-732

Связанные уязвимости

github
5 месяцев назад

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

CVSS3: 5.5
fstec
5 месяцев назад

Уязвимость драйвера ASUS Business System Control Interface, связанная с неправильным присвоением разрешений для критичного ресурса, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 1%
0.00099
Низкий

Дефекты

CWE-732