Auth bypass in Asus Armoury Crate
CVE-2024-12957
A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion. Refer to the '01/23/2025 Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information.
Vulnerability class: Broken Authentication
EPSS: 0.001 (30.6th percentile) — read the EPSS interpretation.
Affected products
- Asus Armoury Crate — versions V2.3.4.0~V5.9.9.0