Vulnerabilities > Asus > Armoury Crate > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-07-26 | CVE-2023-26911 | Unquoted Search Path or Element vulnerability in Asus Armoury Crate and Setupasusservices ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges. | 7.8 |
2023-02-15 | CVE-2022-42455 | Unspecified vulnerability in Asus Armoury Crate 4.1.0.8/5.3.4.0 ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. | 7.8 |