NetSight
IP …
medium6.7

CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability.

Impact

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected products

VendorProductAffected versions
AsusVc65-C1 Firmware
before 1302
AsusPb60v Firmware
before 1302
AsusPb60g Firmware
before 1302
AsusPb60s Firmware
before 1302
AsusPa90 Firmware
before 1401
AsusPb50 Firmware
before 902
AsusPb60 Firmware
before 1502
AsusPb61v Firmware
before 601
AsusTs10 Firmware
before 609
AsusPn40 Firmware
before 2201
AsusPn60 Firmware
before 808
AsusPn30 Firmware
before 320

Weakness classification

CWE-20CWE-787

References