Description
External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message.
Refer to the '
Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ASUS | ASUS Business Manager | through v3.0.38.0 | — |