CVE-2025-15037
An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15037?
CVE-2025-15037 is considered a high-severity vulnerability due to its potential to allow unauthorized access to sensitive hardware resources.
How do I fix CVE-2025-15037?
To fix CVE-2025-15037, update the ASUS Business System Control Interface driver to the latest version provided by ASUS.
What impact does CVE-2025-15037 have on systems?
CVE-2025-15037 can allow unprivileged local users to gain unauthorized control over sensitive hardware resources.
Who is affected by CVE-2025-15037?
CVE-2025-15037 affects systems using the ASUS Business System Control Interface driver.
Can CVE-2025-15037 be exploited remotely?
CVE-2025-15037 cannot be exploited remotely as it requires local access to the vulnerable system.