← Back to CVE List
CVE-2026-13585NVD
Vulnerability Summary
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVSS v4.0 Base Metrics — Score 8.2 (HIGH)
Attack VectorLocal
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredHigh
User InteractionNone
Confidentiality (Vulnerable System)None
Integrity (Vulnerable System)None
Availability (Vulnerable System)High
Confidentiality (Subsequent System)High
Integrity (Subsequent System)None
Availability (Subsequent System)High
Affected & Patched Versions
- ASUS System Control Interface v3 >= before v3.1.66.0
- ASUS System Control Interface >= before v1.1.40.0
- ASUS Business Manager >= through v3.0.38.0
Not provided by cveorg for this CVE.