ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw
CVE-2022-38699

5.9MEDIUM

Key Information:

Vendor
Asus
Status
Armoury Crate Service
Vendor
CVE Published:
28 September 2022

Summary

Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing the logging function to overwrite the system file and disrupt the system.

Affected Version(s)

Armoury Crate Service 5.1.5.0

References

https://www.twcert.org.tw/tw/cp-132-6522-4eacb-1.html
x_refsource_MISC

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Physical
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.