← CVE Intelligence

CVE-2025-13348

ASUS / ASUS Business Manager PUBLISHED

Description (CNA)

An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / productVersions
ASUS / ASUS Business Manageraffected 0 before 3.0.37.0

CWE

CWE-862

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.