CVE-2025-13348
An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13348?
CVE-2025-13348 has a high severity rating due to its potential for improper access control and arbitrary file creation.
How do I fix CVE-2025-13348?
To fix CVE-2025-13348, update to the latest version of ASUS Business Manager that includes the security patches provided by ASUS.
Who is affected by CVE-2025-13348?
CVE-2025-13348 affects users who have installed ASUS Business Manager and are utilizing the Secure Delete Driver.
What type of attack can be executed using CVE-2025-13348?
CVE-2025-13348 can be exploited by a local user to send crafted requests that can lead to the creation of arbitrary files.
Is CVE-2025-13348 a remote or local vulnerability?
CVE-2025-13348 is a local vulnerability, requiring access by a user on the affected system to exploit it.