CVE-2026-15030 — ASUS / System Control Interface v3

CVE-2026-15030

ASUS / System Control Interface v3 PUBLISHED

Description (CNA)

Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / product	Versions
ASUS / System Control Interface v3	affected before v3.1.65.0
ASUS / System Control Interface	affected before v1.1.40.0
ASUS / Business Manager	affected through v3.0.38.0

CWE

CWE-125

References

https://www.asus.com/security-advisory

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.