CVE-2025-59373CWE-732

CVE-2025-59373

published November 25, 2025

CVSS
8.5
EPSS
0%
Percentile
2.6
In the wild
Unconfirmed
What it is

A local privilege escalation vulnerability exists in

the restore mechanism of

ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation into protected system paths, potentially leading to arbitrary files being executed as SYSTEM.

For more information, please refer to section Security Update for MyASUS in the ASUS Security Advisory.

The record
Technical detail
CVSS
8.5 · NONE
CVSS v4.0
Not supplied
EPSS
0.00133 · 2.6th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-11-25T07:15Z
References (1)
EPSS history
Timeline
  • 25 NOV 02:03Z
    A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface
    cvelistv5