System Control Interface vulnerabilities

4 known vulnerabilities in System Control Interface from ASUS. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  System Control Interface: Exposed IOCTL with Insufficient Access Control

  CVE-2026-112116Nov 4, 2026ASUS

  An exposed IOCTL with insufficient access control in ASUS System Control Interface allows a local, low-privileged user to read and write arbitrary physical memory through crafted device control requests, ultimately resulting in a complete compromise of the aff

• 8.4 High severity

  System Control Interface v3: Untrusted Pointer Dereference

  CVE-2026-15029Jul 15, 2026ASUS

  Untrusted Pointer Dereference in ASUS System Control Interface v3, ASUS System Control Interface, and ASUS Business Manager allows a local administrator to perform arbitrary physical memory read and write operations via crafted IOCTL requests to the driver, by

• 8.2 High severity

  System Control Interface v3: Sensitive Information in Resource Not Removed Before Reuse

  CVE-2026-13585Jul 15, 2026ASUS

  Allocation of Resources Without Limits and Throttling and Sensitive Information in Resource Not Removed Before Reuse in the ASUS System Control Interface driver and ASUS Business Manager allow a local administrator to disclose sensitive information via crafted

• 7.8 High severity

  Asusswitch: Incorrect Default Permissions

  CVE-2022-36438Oct 18, 2022ASUS

  AsusSwitch.exe on ASUS personal computers (running Windows) sets weak file permissions, leading to local privilege escalation (this also can be used to delete files within the system arbitrarily). This affects ASUS System Control Interface 3 before 3.1.5.0, an