CVE-2019-17603

Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a…

published June 2, 2020

CVSS
—
EPSS
1%
Percentile
53.8
In the wild
Unconfirmed
What it is

Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a denial of service (system crash) or gain privileges via IOCTL requests using crafted kernel addresses that trigger memory corruption.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00730 · 53.8th percentile
Published
2020-06-02T14:47Z
EPSS history
Timeline
  • 02 JUN 14:47Z
    Ene.sys in Asus Aura Sync through 1.07.71 does not properly validate input to IOCTL 0x80102044, 0x80102050, and 0x80102054, which allows local users to cause a…
    cvelistv5