Description
Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a local user to read and write arbitrary PCI/PCIe configuration space via crafted IOCTL requests by bypassing the driver's verification.
Refer to the '
Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | Armoury Crate | through 6.5.7 | — |