CVE-2018-18535 describes a high-severity vulnerability in the Asusgio low-level driver within ASUS Aura Sync v1.07.22 and earlier, allowing attackers to read and write Machine Specific Registers (MSRs). This local privilege escalation could lead to arbitrary ring-0 code execution, granting full system control. While there are no known public exploits or active exploitation, the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.07.22CPE matchmatch criteria | cpe:2.3:o:asus:aura_sync_firmware:1.07.22:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.