CVE-2022-42455

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-02-15 · updated 2026-06-17
Weakness: CWE-269

Description

ASUS EC Tool driver (aka d.sys) 1beb15c90dcf7a5234ed077833a0a3e900969b60be1d04fcebce0a9f8994bdbb, as signed by ASUS and shipped with multiple ASUS software products, contains multiple IOCTL handlers that provide raw read and write access to port I/O and MSRs via unprivileged IOCTL calls. Local users can gain privileges.

Affected products

ASUS Armoury Crate: before 5.3.4.1 — fixed in 5.3.4.1

How to fix

Upgrade to a fixed version: ASUS Armoury Crate 5.3.4.1. Check the vendor advisory for mitigations.

References

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0003.md
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2023/MNDT-2023-0003.md

Get alerted when CVE-2022-42455 or the next vulnerability affects your stack