Out-of-bounds Read in ASUS Business Manager
CVE-2026-15030
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
Vulnerability class: Buffer Overflow
EPSS: 0.001 (3.4th percentile) — read the EPSS interpretation.
Affected products
- Asus Business Manager — versions 0
- Asus System Control Interface — versions 0
- Asus System Control Interface V3 — versions 0