CVE-2022-42455: Improper Privilege Management

ASUS EC Tool driver aka d.sys 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local user...

PT-2023-14118

Name of the Vulnerable Software and Affected Versions ASUS EC Tool driver aka d.sys versions prior to the fixed version asus armoury crate versions prior to 5.3.4.1 Description The issue concerns a driver that provides raw read and write access to port I/O and MSRs via unprivileged IOCTL calls,...