PT-2025-3111 · Asus · Asus Gputweak Ii

Published 2025-01-07 · Updated 2025-01-23 · CVE-2024-55410

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Asus GPU Tweak II Program Driver version 1.0.0.0

Description The issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests.

Recommendations For Asus GPU Tweak II Program Driver version 1.0.0.0, consider disabling the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component until a patch is available to prevent arbitrary read and write actions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

CWE-1284

Related Identifiers

CVE-2024-55410

Affected Products

Asus Gputweak Ii

References · 6

• 🔥 https://github.com/heyheysky/vulnerable-driver/blob/master/CVE-2024-55410/CVE-2024-55410_690b33e1-0462-4e84-9bea-c7552b45432a.sys_README.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-55410 · Security Note
• http://asus.com · Note
• https://t.me/cvedetector/14590 · Telegram Post
• https://twitter.com/CVEnew/status/1876953365503934898 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1876728893148676570 · Twitter Post