CVE Vulnerabilities

CVE-2022-36439

Published: Oct 18, 2022 | Modified: Nov 07, 2023
CVSS 3.x
6
MEDIUM
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via SYSTEM privileges. This affects ASUS System Control Interface 3 before 3.1.5.0, AsusSoftwareManger.exe before 1.0.53.0, and AsusLiveUpdate.dll before 1.0.45.0.

Affected Software

Name Vendor Start Version End Version
Asusliveupdate Asus * 1.0.45.0 (excluding)
Asussoftwaremanger Asus * 1.0.53.0 (excluding)
System_control_interface Asus 3.0.0.0 (including) 3.1.5.0 (excluding)

References