Vulnerability in ASUS Aura Sync
CVE-2019-25764
**UNSUPPORTED WHEN ASSIGNED** Exposed IOCTL with Insufficient Access Control in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, resulting in privilege escalation. Refer to the 'End-of-Life Notice and Driver Update for Legacy ASUS Drivers ' section on the ASUS Security Advisory for more information.
EPSS: 0.001 (2.3th percentile) — read the EPSS interpretation.
Affected products
- Asus Aura Sync — versions 0