System Control Interface
Approved changes feed: RSS · Atom
cpe:2.3:a:asus:system_control_interface:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | System Control Interface (6d320175-4031-5eb9-884f-19e51fa7094b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-15030 |
vulnerable | 2026-07-29 00:26:17.733238 |
Details available
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Published: 2026-07-15T02:01:24.038Z
Updated: 2026-07-15T14:24:06.901Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-15029 |
vulnerable | 2026-07-29 00:26:17.731803 |
Details available
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Published: 2026-07-15T02:01:33.203Z
Updated: 2026-07-15T14:23:38.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-13585 |
vulnerable | 2026-07-29 00:23:33.210818 |
Details available
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Published: 2026-07-15T02:01:10.343Z
Updated: 2026-07-21T07:48:30.492Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36439 |
vulnerable | 2026-06-08 05:46:07.422422 |
Details available
AsusSoftwareManager.exe in ASUS System Control Interface on ASUS personal computers (running Windows) allows a local user to write into the Temp directory and delete another more privileged file via SYSTEM privileges. This affects ASUS System Control Interface 3 before 3.1.5.0, AsusSoftwareManger.exe before 1.0.53.0, and AsusLiveUpdate.dll before 1.0.45.0.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-13T14:49:45.603Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36438 |
vulnerable | 2026-06-08 05:46:07.420312 |
Details available
AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete files within the system arbitrarily). This affects ASUS System Control Interface 3 before 3.1.5.0, and AsusSwitch.exe before 1.0.10.0.
Published: 2022-10-18T00:00:00.000Z
Updated: 2025-05-13T14:51:25.051Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.