PT-2024-25154 · Asustek Computer · Asus Usb 3.0 Boost Storage Driver

Driverhunter · Published 2024-05-22 · Updated 2024-08-01 · CVE-2024-33218

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUSTeK Computer Inc ASUS USB 3.0 Boost Storage Driver version 5.30.20.0

Description An issue in the component AsUpIO64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Recommendations For version 5.30.20.0, consider disabling the AsUpIO64.sys component until a patch is available to prevent privilege escalation and arbitrary code execution.

Exploit

Fix

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2024-33218

Affected Products

Asus Usb 3.0 Boost Storage Driver

References · 6

• 🔥 https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33218 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-33218 · Security Note
• https://t.me/cvenotify/80707 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1793317467420303519 · Twitter Post
• https://twitter.com/CVEnew/status/1793384173870195108 · Twitter Post
• https://t.me/cvenotify/80754 · Telegram Post