ASUS Business System Control Interface Incorrect Permission Assignment Vulnerability

Vulnerability

A vulnerability allowing incorrect permission assignment has been identified in the ASUS Business System Control Interface driver. This issue can be exploited by an unprivileged local user who sends a specially crafted IOCTL request. The vulnerability may lead to unauthorized access to sensitive hardware resources and disclosure of kernel information.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive hardware resources and disclosure of kernel information.

Remediation

Users can refer to the ASUS Security Advisory for the latest update regarding this vulnerability.

Added: Mar 12, 2026, 3:21 AM
Updated: Mar 12, 2026, 3:21 AM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
0.6
exploitability
3.3
remediation
0.0
relevance
4.1
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.