{"id": "CVE-2022-21933", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}, {"type": "Secondary", "source": "twcert@cert.org.tw", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.7, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.8}]}, "published": "2022-01-21T09:15:06.820", "references": [{"url": "https://www.twcert.org.tw/tw/cp-132-5547-34bc4-1.html", "tags": ["Third Party Advisory"], "source": "twcert@cert.org.tw"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}, {"type": "Secondary", "source": "twcert@cert.org.tw", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service."}, {"lang": "es", "value": "El dispositivo ASUS VivoMini/Mini PC presenta una vulnerabilidad de comprobaci\u00f3n de entrada inapropiada. Un atacante local con privilegios de sistema puede usar la interrupci\u00f3n de administraci\u00f3n del sistema (SMI) para modificar la memoria, resultando en una ejecuci\u00f3n de c\u00f3digo arbitrario para controlar el sistema o interrumpir el servicio"}], "lastModified": "2023-07-24T13:53:02.023", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:vc65-c1_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "395B2D9B-6DFD-4AD2-BC1C-F028D9F09156", "versionEndExcluding": "1302"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:vc65-c1:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D95AA553-93DD-4B25-998D-1931984CAE43"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pb60v_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0160408D-702A-40C4-A708-577A2382061C", "versionEndExcluding": "1302"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pb60v:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "3819ED72-D8BA-475A-BC75-1AFDD32355CE"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pb60g_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45E296C4-7A32-4BC4-9F43-4D6967CC9E3D", "versionEndExcluding": "1302"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pb60g:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8A9D7121-8D3E-4B28-8BAF-FD35DA75D52F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pb60s_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D8E824D-F3A6-4719-B2F9-6B48D081FD3D", "versionEndExcluding": "1302"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pb60s:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "42187AD8-D7C0-433C-9B15-8B34854F4E44"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pa90_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40112146-802E-462B-A549-F3D59B8C6A07", "versionEndExcluding": "1401"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pa90:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4331D58D-60C8-4C8D-A56E-BC673265EAFB"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pb50_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "065CAC27-8EED-4CCA-B581-7DE18B5E3679", "versionEndExcluding": "902"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pb50:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "0012812A-1DCE-40DD-8333-D0D3263D4037"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pb60_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D02742FD-6BE3-4168-93F8-D5D583EE16F9", "versionEndExcluding": "1502"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pb60:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "1A3DD60D-1F92-435D-AD01-3D3D97F4C9DF"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pb61v_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2361CDED-64D2-49B7-85F7-A9E5E0D9648D", "versionEndExcluding": "601"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pb61v:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5401FCAE-BBA0-48AF-B41A-6AA56FD69C32"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:ts10_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7D8ABFC-E97D-4534-A477-00C59CCFC4BD", "versionEndExcluding": "609"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:ts10:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "770CEBE0-41C1-4946-A0E5-38426B2E55AC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pn40_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "926B71C7-45C0-4070-BEAB-551896043C6E", "versionEndExcluding": "2201"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pn40:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "48A7EC77-C345-4976-8E71-D7D9EECCD8DC"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pn60_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C8E41C0-87D8-4E5E-A8A8-F4ED6935C283", "versionEndExcluding": "808"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pn60:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9D15F380-7802-4A8E-BD79-68BC682C6E15"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:pn30_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "48B92D16-649E-4565-B488-EE9081C2DE0E", "versionEndExcluding": "320"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:pn30:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4C3C527A-4216-4755-B01D-E9ED1C1E7DB7"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:asus:un65u_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D99FD9A8-B2D5-4CEC-8610-D0172EF5D9FA", "versionEndExcluding": "618"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:asus:un65u:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A7A7D92E-2D8E-4CF5-BA4C-2AED0946F6FF"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "twcert@cert.org.tw"}
