Vulnerability in Asus Business System Control Interface

CVE-2025-15037

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading…

EPSS: 0.000 (6.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References