CVE-2024-55408CWE-862

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL…

Medium · published January 6, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
14.6
In the wild
Unconfirmed
What it is

An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00243 · 14.6th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-01-06T00:00Z
EPSS history
Timeline
  • 06 JAN 00:00Z
    An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL…
    cvelistv5