← Back to CVE List
CVE-2026-15029NVD
Vulnerability Summary
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVSS v4.0 Base Metrics — Score 8.4 (HIGH)
Attack VectorLocal
Attack ComplexityLow
Attack RequirementsNone
Privileges RequiredHigh
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)High
Availability (Vulnerable System)High
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
Affected & Patched Versions
- ASUS System Control Interface v3 >= before v3.1.65.0
- ASUS System Control Interface >= before v1.1.40.0
- ASUS Business Manager >= through v3.0.38.0
Not provided by cveorg for this CVE.