high7.8
CVE-2020-10649
DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code execution with no additional restrictions w…
Impact
DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asus | Device Activation | before 1.0.7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://drive.google.com/file/d/1Ap293b7bZLen6DmheppR1IUFEAsCSORC/view?usp=sharing
- https://www.asus.com/Laptops/ASUS-TUF-Gaming-FX504/HelpDesk_Download/
- https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/
- https://www.asus.com/support/FAQ/1042640/
- https://drive.google.com/file/d/1Ap293b7bZLen6DmheppR1IUFEAsCSORC/view?usp=sharing
- https://www.asus.com/Laptops/ASUS-TUF-Gaming-FX504/HelpDesk_Download/
- https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/
- https://www.asus.com/support/FAQ/1042640/