Description
An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | System Control Interface | 3.1.66.0 – ≤ 3.1.69.0 | — |