PT-2021-23493 · Asustek · Asustek Zenbook Pro Due 15 Ux582

Published 2021-10-18 · Updated 2021-10-22 · CVE-2021-42055

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUSTek ZenBook Pro Due 15 UX582 laptop firmware versions through 203

Description The issue is related to Insecure Permissions in the firmware, allowing attacks by a physically proximate attacker.

Recommendations For versions through 203, update the firmware to a version that addresses the Insecure Permissions issue.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2021-42055

Affected Products

Asustek Zenbook Pro Due 15 Ux582

References · 4

• https://asus.com/Static_WebPage/ASUS-Product-Security-Advisory · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-42055 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42055 · Security Note
• https://t.me/cibsecurity/30723 · Telegram Post