CVE-2024-55408

https://notcve.org/view.php?id=CVE-2024-55408

06 Jan 2025 — An issue in the AsusSAIO.sys component of ASUS System Analysis IO v1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. Un problema en el componente AsusSAIO.sys de ASUS System Analysis IO v1.0.0 permite a los atacantes realizar acciones de lectura y escritura arbitrarias mediante el suministro de solicitudes IOCTL manipuladas. An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the... • http://asus.com • CWE-862: Missing Authorization •