CVE-2022-21933

ASUS VivoMini/Mini PC - improper input validation

Published Jan 21, 2022 CVSS 3.1 · 6.7 Medium EPSS < 1% KEV · Not listed
Description
ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Remediation

Vendor Solution

BIOS Update(https://www.asus.com/content/ASUS-Product-Security-Advisory/)

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-27089 ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.
History

No history.