← CVE Intelligence

CVE-2022-21933

ASUS VivoMini/Mini PC - improper input validation PUBLISHED

Description (CNA)

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected (CNA)

Vendor / productVersions
ASUS / VC65-C1affected unspecified before 1302
ASUS / PB60Vaffected unspecified before 1302
ASUS / PB60Gaffected unspecified before 1302
ASUS / PB60Saffected unspecified before 1302
ASUS / PA90affected unspecified before 1401
ASUS / PB50affected unspecified before 902
ASUS / PB60affected unspecified before 1502
ASUS / PB61Vaffected unspecified before 601
ASUS / TS10affected unspecified before 609
ASUS / PN40affected unspecified before 2201
ASUS / PN60affected unspecified before 808
ASUS / PN30affected unspecified before 320
ASUS / UN65Uaffected unspecified before 618

CWE

CWE-20

References

ADP enrichment

CVE

No English description supplied.