PT-2024-25159 · Asus · Asus Atszio Driver

Published 2024-05-22 · Updated 2024-10-29 · CVE-2024-33222

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ASUS ATSZIO Driver version 0.2.1.7

Description An issue in the component ATSZIO64.sys of the ASUS ATSZIO Driver allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Recommendations For version 0.2.1.7, consider disabling the ATSZIO64.sys component until a patch is available to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-782

Related Identifiers

CVE-2024-33222

Affected Products

Asus Atszio Driver

References · 6

• 🔥 https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33222 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-33222 · Security Note
• https://t.me/cvenotify/80760 · Telegram Post
• https://twitter.com/CVEnew/status/1793384178681065863 · Twitter Post
• https://t.me/cvenotify/80715 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1793352546347626702 · Twitter Post