CVE-2022-26668CWE-269

ASUS Control Center - Broken Access Control

High · published June 20, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00910 · 59.6th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-06-20T05:30Z
EPSS history
Timeline
  • 20 JUN 05:30Z
    ASUS Control Center - Broken Access Control
    cvelistv5