Member Center(华硕大厅)
Approved changes feed: RSS · Atom
cpe:2.3:a:asus:member_center(华硕大厅):*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Asus (8cdf1a5f-f554-5682-aa69-77df29ab6a26) |
|---|---|
| Product | Member Center(华硕大厅) (3933d685-0b9f-54ac-a75d-1edac9de3e04) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3428 |
vulnerable | 2026-06-08 08:01:18.603632 |
Details available
A Download of Code Without Integrity Check vulnerability in the update modules in ASUS Member Center(华硕大厅) allows a local user to achieve privilege escalation to Administrator via exploitation of a Time-of-check Time-of-use (TOC-TOU) during the update process, where an unexpected payload is substituted for a legitimate one immediately after download, and subsequently executed with administrative privileges upon user consent.
Refer to the 'Security Update for ASUS Member Center' section on the ASUS Security Advisory for more information.
Published: 2026-04-16T02:02:41.534Z
Updated: 2026-04-16T12:31:27.657Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.