CVEvulnerability

CVE-2024-33221

7.8 HIGH Published 2024-05-22 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-782

Description

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Related

Weakness · CWE (1)

  • CWE-782 Exposed IOCTL with Insufficient Access Control weakness

References