Description
An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | ASUS Business Manager | < 3.0.37.0 | 3.0.37.0 |
References
- https://www.asus.com/security-advisory/ vendor-advisory