~ / search / CVE-2026-112116

CVE-2026-112116

State: published CNA: ASUS CVSS 4.0 8.5 High NVD: received

Description

An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the affected system. Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.

Affected products

VendorProductVersions
ASUS System Control Interface 3.1.66.0 to ≤3.1.69.0

References

External links from the record. They lead to third-party sites.