PT-2021-17190
CVE-2021-26943
·
Published
2021-03-30
·
Updated
2021-04-07
Description by
CVSS 3.1
8.2
HighMetricsAV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
ASUS UX360CA BIOS versions through 303
Description:
The issue allows an attacker with ring 0 privilege to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM.
Recommendations:
For ASUS UX360CA BIOS versions through 303, update to a version later than 303 to resolve the issue.
As a temporary workaround, consider restricting access to ring 0 privilege to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾