Description
An uncontrolled search path element vulnerability in ASUS Armoury Crate allows local users to execute arbitrary code with SYSTEM privileges via replacement of a dynamic-link library (DLL) that is later loaded by a high-privilege process.
Refer to the '
Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | Armoury Crate | V3.0.0. – ≤ V6.5.10 | — |
| ASUS | Armoury Crate SE | V2.1.17 – ≤ V2.2.17 | — |