Armoury Crate vulnerabilities

An exposed IOCTL with insufficient access control in the Armoury Crate driver allows a local user to add an arbitrary process identifier to the driver's whitelist via a crafted IOCTL request, bypassing the driver's verification. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.

A vulnerability in Armoury Crate software stems from incorrect permission assignment for a critical resource. A local user can bypass the driver's validation mechanism, gaining unauthorized read and write access to physical memory.

A link following vulnerability exists in the UnifyScanner component of Armoury Crate. It may be triggered by creating a specially crafted junction, potentially leading to local privilege escalation.