PT-2025-1981 · Asus · Armoury Crate

Published 2025-01-23 · Updated 2025-01-23 · CVE-2024-12957

Positive Technologies (AI Summary)

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:H/SA:H

The Armoury Crate App is affected by a file handling command issue that can lead to arbitrary file deletion. The affected software is Armoury Crate, and an exploit for this issue is available. Unfortunately, the specific versions of Armoury Crate that are affected are not specified. More information can be found at the provided links, including the ASUS Security Advisory. It is recommended that users refer to the '01/23/2025 Security Update for Armoury Crate App' section for more information and to apply the necessary security update. #ArmouryCrate #ASUS #ArbitraryFileDeletion #FileHandlingCommand #SecurityUpdate #Cybersecurity

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-12957

Affected Products

Armoury Crate

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2024-12957 · Security Note
• https://t.me/cvedetector/16170 · Telegram Post
• https://twitter.com/CVEnew/status/1882365349946945936 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1882379414802993249 · Twitter Post
• https://asus.com/content/asus-product-security-advisory · Note
• https://t.me/cvenotify/108335 · Telegram Post
• https://twitter.com/CveFindCom/status/1882368844691395013 · Twitter Post