Approved changes feed: RSS · Atom

cpe:2.3:a:asus:armoury_crate_&_aura_creator_installer_(rog_live_service):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductArmoury Crate & Aura Creator Installer (Rog Live Service) (0cf42768-68ac-550a-8d71-10ff0f37ec3a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-22262 vulnerable 2026-06-08 05:40:07.902287 ASUS Armoury Crate & Aura Creator Installer之ROG Live Service - Improper Link Resolution Before File Access
HIGH (7.7)
ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before deletion, an unauthenticated local attacker can create an unexpected symbolic link to system file path, to delete arbitrary system files and disrupt system service.
Published: 2022-03-01T01:55:19.047Z
Updated: 2024-09-17T01:45:46.992Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.