Vulnerabilities > CVE-2021-26943 - Unspecified vulnerability in Asus Ux360Ca Bios 303

047910
CVSS 8.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
HIGH
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
low complexity
asus

Summary

The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).

Vulnerable Configurations

Part Description Count
OS
Asus
2
Hardware
Asus
1