Threat Investigation
Request a demo

CVE-2021-26943

High

Description

The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3).

SeverityHigh
CVSS8.2
Exploit probability—
ProductAsus Ux360ca Bios
PublishedMar 31, 2021
First seenMar 31, 2021

How to fix

Update
  • asus ux360ca_bios304 or later

Affected products

ProductAffected versionsFixed in
asus ux360ca_biosv < 304304

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.