CVE-2022-21933
Medium
Description
ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.
SeverityMedium
CVSS6.7
Exploit probability—
ProductAsus Vc65-c1 Firmware
PublishedJan 21, 2022
First seenJan 21, 2022
Weakness typeCWE-20Improper input validation
How to fix
Update
- asus vc65-c1_firmware1302 or later
- asus pb60v_firmware1302 or later
- asus pb60g_firmware1302 or later
- asus pb60s_firmware1302 or later
- asus pa90_firmware1401 or later
- asus pb50_firmware902 or later
- asus pb60_firmware1502 or later
- asus pb61v_firmware601 or later
- asus ts10_firmware609 or later
- asus pn40_firmware2201 or later
- asus pn60_firmware808 or later
- asus pn30_firmware320 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| asus vc65-c1_firmware | v < 1302 | 1302 |
| asus pb60v_firmware | v < 1302 | 1302 |
| asus pb60g_firmware | v < 1302 | 1302 |
| asus pb60s_firmware | v < 1302 | 1302 |
| asus pa90_firmware | v < 1401 | 1401 |
| asus pb50_firmware | v < 902 | 902 |
| asus pb60_firmware | v < 1502 | 1502 |
| asus pb61v_firmware | v < 601 | 601 |
| asus ts10_firmware | v < 609 | 609 |
| asus pn40_firmware | v < 2201 | 2201 |
| asus pn60_firmware | v < 808 | 808 |
| asus pn30_firmware | v < 320 | 320 |
| asus un65u_firmware | v < 618 | 618 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.