PT-2024-25157 · Asustek Computer · Aisuite3

Published 2024-05-22 · Updated 2024-10-29 · CVE-2024-33220

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AISuite3 version 3.03.36

Description An issue in the component AslO3 64.sys allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Recommendations For version 3.03.36, consider disabling the AslO3 64.sys component until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2024-33220

Affected Products

Aisuite3

References · 7

• 🔥 https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33220 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-33220 · Security Note
• https://osv.dev/vulnerability/CVE-2024-33220 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1793318481024225320 · Twitter Post
• https://twitter.com/CVEnew/status/1793384176307122316 · Twitter Post
• https://t.me/cvenotify/80709 · Telegram Post
• https://t.me/cvenotify/80756 · Telegram Post