Skip to content
CVE PROGRAM SOURCE RECORD6.7 Medium

CVE-2022-21933

ASUS VivoMini/Mini PC - improper input validation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
twcert

Description

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ASUS VC65-C1

  • unspecified to < 1302affected

ASUS PB60V

  • unspecified to < 1302affected

ASUS PB60G

  • unspecified to < 1302affected

ASUS PB60S

  • unspecified to < 1302affected

ASUS PA90

  • unspecified to < 1401affected

ASUS PB50

  • unspecified to < 902affected

ASUS PB60

  • unspecified to < 1502affected

ASUS PB61V

  • unspecified to < 601affected

ASUS TS10

  • unspecified to < 609affected

ASUS PN40

  • unspecified to < 2201affected

ASUS PN60

  • unspecified to < 808affected

ASUS PN30

  • unspecified to < 320affected

ASUS UN65U

  • unspecified to < 618affected

References