← CVE Intelligence

CVE-2026-7480

ASUS / ASUS System Control Interface PUBLISHED

Description (CNA)

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism. Refer to the 'Security Update for ASUS System Control Interface' section on the ASUS Security Advisory for more information.

Affected (CNA)

Vendor / productVersions
ASUS / ASUS System Control Interfaceaffected 3.1.59.0 and earlier
ASUS / ASUS System Control Interfaceaffected 3.2.60.0 and earlier

CWE

CWE-732

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.