ASUS System Control Interface Incorrect Permission Assignment Vulnerability Allowing Privilege Escalation

A vulnerability in ASUS System Control Interface allows local users to elevate privileges to SYSTEM and execute arbitrary code. This issue arises from an incorrect permission assignment for critical resources, enabling crafted RPC calls to bypass the validation mechanism. The vulnerability affects versions through 3.1.59.0 (x64) and 3.2.60.0 (ARM).

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing a local user to gain SYSTEM rights and execute arbitrary code with those elevated privileges.

Remediation

Users can refer to the 'Security Update for ASUS System Control Interface' section on the ASUS Security Advisory page for update instructions.