Skip to content
OpenAdvisories
Medium · 6.7 CVE-2022-21933 EUVD-2022-27089GHSA-qjg9-wm29-5rcr

ASUS VivoMini/Mini PC - improper input validation

Published Jan 21, 2022 · Updated Sep 16, 2024 · Assigned by twcert

Vendor: ASUS Product: PA90 Product: PB50 Product: PB60 Product: PB60G Product: PB60S Product: PB60V Product: PB61V Product: PN30 Product: PN40 Product: PN60 Product: TS10 Product: UN65U Product: VC65-C1

Description

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected products

VendorProductAffectedFixed
ASUS VC65-C1 unspecified – < 1302 1302
ASUS PB60V unspecified – < 1302 1302
ASUS PB60G unspecified – < 1302 1302
ASUS PB60S unspecified – < 1302 1302
ASUS PA90 unspecified – < 1401 1401
ASUS PB50 unspecified – < 902 902
ASUS PB60 unspecified – < 1502 1502
ASUS PB61V unspecified – < 601 601
ASUS TS10 unspecified – < 609 609
ASUS PN40 unspecified – < 2201 2201
ASUS PN60 unspecified – < 808 808
ASUS PN30 unspecified – < 320 320
ASUS UN65U unspecified – < 618 618

References