CVE-2022-26668

Name of the Vulnerable Software and Affected Versions ASUS Control Center (affected versions not specified)

Description The issue is related to a broken access control vulnerability in the ASUS Control Center API. This allows an unauthenticated remote attacker to call privileged API functions, which can result in partial system operations or cause a partial disruption of service. The vulnerability is associated with insecure privilege management, potentially enabling a remote attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.