ASUS System Control Interface vulnerabilities

An out-of-bounds read vulnerability in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by sending a crafted IOCTL request that bypasses validation.

A vulnerability in the ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager drivers allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests, bypassing OS-enforced memory protections.

A vulnerability in the ASUS System Control Interface driver and ASUS Business Manager allows a local administrator to disclose sensitive information via crafted IOCTL requests. In severe cases, this may lead to a Denial of Service (DoS) on the system.

An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypasses the validation mechanism.