← Back to CVE List
CVE-2026-15030NVD
Vulnerability Summary
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVSS v4.0 Base Metrics — Score 5.6 (MEDIUM)
Attack VectorLocal
Attack ComplexityHigh
Attack RequirementsNone
Privileges RequiredHigh
User InteractionNone
Confidentiality (Vulnerable System)High
Integrity (Vulnerable System)None
Availability (Vulnerable System)None
Confidentiality (Subsequent System)None
Integrity (Subsequent System)None
Availability (Subsequent System)None
Affected & Patched Versions
- ASUS System Control Interface v3 >= before v3.1.65.0
- ASUS System Control Interface >= before v1.1.40.0
- ASUS Business Manager >= through v3.0.38.0
Not provided by cveorg for this CVE.