QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-15037

Back to search

CVE-2025-15037

Published: Mar 12, 2026

Modified: Mar 12, 2026

PUBLISHED

Description

An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL request, potentially leading to unauthorized access to sensitive hardware resources and kernel information disclosure. Refer to the "ASUS Business System Control Interface" section on the ASUS Security Advisory for more information.

VendorProductVersions

ASUS

ASUS Business System Control Interface

affected
0 - < 0.5.14.0

Weaknesses (CWE)

CWE-732

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now