← Database

CVE-2022-42455

HIGH CVSS: 7.8 Published: 2023-02-15 Modified: 2026-06-17

Description

ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges.

Affected Platforms

Asus Armoury Crate

Weakness Type

NVD-CWE-noinfo, CWE-269

References