CVE-2023-26911

Summary

ASUS SetupAsusServices v1.0.5.1 in Asus Armoury Crate v5.3.4.0 contains an unquoted service path vulnerability which allows local users to launch processes with elevated privileges.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://asus.com
• http://setupasusservices.com
• https://irradiate.com.au/blog/CVE-2023-26911

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://irradiate.com.au/blog/CVE-2023-26911

• ←Previous
• Next→