Asus System Control Interface v3 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Asus System Control Interface v3: 3 record(s), with affected versions and fixes.
CVE-2026-15030
Medium · 5.6
CWE-125 Jul 14, 2026
Out-of-bounds Read in Asus System Control Interface v3
Out-of-bounds Read in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to read memory regions beyond the intended firmware boundary by supplying a crafted IOCTL request that bypasses the validation.
Refer to the ' Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVE-2026-15029
High · 8.4
CWE-822 Jul 14, 2026
Untrusted Pointer Dereference in Asus System Control Interface v3
Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, bypassing OS-enforced memory protections.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.
CVE-2026-13585
High · 8.2
CWE-226 Jul 14, 2026
Allocation of Resources Without Limits and Throttling and Sensitive Information in…
Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted IOCTL requests, which, in severe cases, may lead to a Denial of Service (DoS) on the system.
Refer to the '
Security Update for ASUS System Control Interface ' section on the ASUS Security Advisory for more information.