PT-2024-25155 · Asustek Computer · Asus Sabertooth X99 Driver

Published 2024-05-22 · Updated 2024-08-20 · CVE-2024-33219

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUSTeK Computer Inc ASUS SABERTOOTH X99 Driver version 1.0.1.0

Description An issue in the component AsIO64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Recommendations For version 1.0.1.0, consider disabling the AsIO64.sys component until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2024-33219

Affected Products

Asus Sabertooth X99 Driver

References · 8

• 🔥 https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33219 · Exploit
• https://osv.dev/vulnerability/CVE-2024-33219 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-33219 · Security Note
• https://t.me/cvenotify/80755 · Telegram Post
• https://t.me/cvenotify/91321 · Telegram Post
• https://twitter.com/CVEnew/status/1793384175103246690 · Twitter Post
• https://t.me/cvenotify/80708 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1793317720445829217 · Twitter Post