Approved changes feed: RSS · Atom

cpe:2.3:a:asus:control_center:1.4.2.5:*:*:*:*:*:*:*

part: a version: 1.4.2.5 update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductControl Center (16049f4b-148d-538f-a4c0-a73903fba2f3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26669 vulnerable 2026-06-08 05:41:52.785891 ASUS Control Center - SQL Injection
HIGH (8.8)
ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inject SQL command to specific API parameters to acquire database schema or access data.
Published: 2022-06-20T05:30:31.029Z
Updated: 2024-09-17T02:42:16.801Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26668 vulnerable 2026-06-08 05:41:52.785343 ASUS Control Center - Broken Access Control
HIGH (7.3)
ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service.
Published: 2022-06-20T05:30:29.581Z
Updated: 2024-09-17T02:42:54.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.