Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory add
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
The affected software is firmware on certain ASUS motherboards. A user with kernel-level privileges could exploit this flaw to read or alter system information or crash the system.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Untrusted Pointer Dereference in ASUS certain motherboards firmware allows a kernel-level privileges user can supply an arbitrary memory address via an I/O command, leading to subsequent system information being tampered with or causing a system crash. Refer to the 'Security Update for Multiple ASUS Motherboards' section on the ASUS Security Advisory for more information.
Timeline
- CVE published
- First seen by cve.now
Affected versions
- ASUS motherboards firmware
A520/B550 series Before 3644 4304, X570 Series Before 5054, A620/A620A Series Before 4003 4004, B650 Series Before 1303 4003 4004, X670 Series Before 4003 4004, B840 Series Before 1804, B850 Series Before 1103 1804 2503, X870 Series Before 1804 2503, X870E Series Before 1103 2503, Knoll Series Before 4003, TRX50 Series Before 0703 1403, W790 Series Before 2101, WRX90 Series Before 1403