Local Privilege Escalation in ASUS System Control Interface on Windows Devices

CVE-2022-36438

What is CVE-2022-36438?

The AsusSwitch.exe application on ASUS personal computers running Windows is susceptible to local privilege escalation due to incorrectly set weak file permissions. This vulnerability allows an attacker to gain elevated privileges on the system, potentially enabling arbitrary file deletions and unauthorized access to sensitive information. The affected versions of the ASUS System Control Interface and AsusSwitch.exe need to be updated to their respective safe versions to mitigate these risks.

References