Local Privilege Escalation in ASUS System Control Interface on Windows Devices
CVE-2022-36438

7.8HIGH

Key Information:

Vendor

Asus
Status
Asusswitch
System Control Interface
Vendor
CVE Published:
18 October 2022

What is CVE-2022-36438?

The AsusSwitch.exe application on ASUS personal computers running Windows is susceptible to local privilege escalation due to incorrectly set weak file permissions. This vulnerability allows an attacker to gain elevated privileges on the system, potentially enabling arbitrary file deletions and unauthorized access to sensitive information. The affected versions of the ASUS System Control Interface and AsusSwitch.exe need to be updated to their respective safe versions to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://asus.com
https://asus-my.sharepoint.com/personal/carinacw_li_asus_...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.