Gigabyte Control Center Arbitrary File Write Vulnerability Allowing Code Execution or Privilege Escalation

An arbitrary file write vulnerability has been identified in Gigabyte Control Center, affecting versions through 25.07.21.01. When the pairing feature is enabled, unauthenticated remote attackers can write files to any location on the operating system. This vulnerability could lead to arbitrary code execution or privilege escalation.

Impact

Exploitation of this vulnerability could result in unauthorized file writing, potentially allowing for arbitrary code execution or privilege escalation on the affected system.

Remediation

Users are advised to update Gigabyte Control Center to version 25.12.10.01 or later.