Description (CNA)
An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| ASUS / ASCI | affected before 1.0.30.0; affected before 3.1.41.0 |
CWE
CWE-862
References
- https://www.asus.com/tw/support/myasus-deeplink/
- https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55408/CVE-2024-55408_AsusSAIO.sys_README.md
ADP enrichment
No English description supplied.
No references supplied.