PT-2024-25154 · Asustek Computer · Asus Usb 3.0 Boost Storage Driver

Driverhunter

·

CVE-2024-33218

·

Published

2024-05-22

·

Updated

2024-08-01

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver version 5.30.20.0
Description An issue in the component AsUpIO64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.
Recommendations For version 5.30.20.0, consider disabling the AsUpIO64.sys component until a patch is available to prevent privilege escalation and arbitrary code execution.

Exploit

Fix

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2024-33218

Affected Products

Asus Usb 3.0 Boost Storage Driver