← Database

CVE-2022-21933

MEDIUM CVSS: 6.7 Published: 2022-01-21 Modified: 2026-06-17

Description

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.

Affected Platforms

Asus Pn60 FirmwareAsus Pa90Asus Pn40 FirmwareAsus Pn30 FirmwareAsus Pb60VAsus Pn30Asus Pb61V FirmwareAsus Ts10 FirmwareAsus Vc65-C1Asus Pb50 Firmware

Weakness Type

CWE-20, CWE-787

References