Vulnerability in ASUS Aura Sync

CVE-2019-25764

**UNSUPPORTED WHEN ASSIGNED**  Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.

EPSS: 0.001 (2.3th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References