Skip to content
OpenAdvisories
High · 8.5 CVE-2025-13348 EUVD-2025-206616GHSA-3xh7-fq5x-f9qj

An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered …

Published Feb 2, 2026 · Updated Feb 2, 2026 · Assigned by ASUS

Description

An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.

Affected products

VendorProductAffectedFixed
ASUS ASUS Business Manager < 3.0.37.0 3.0.37.0

References