Vulnerabilities > Asus > Screenpad2 Upgrade Tool > High

DATE CVE VULNERABILITY TITLE RISK
2020-07-20 CVE-2020-15009 Untrusted Search Path vulnerability in Asus Screenpad2 Upgrade Tool 1.0.3
AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX and UX550GEX) could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name.
local
low complexity
asus CWE-426
7.8