AsusScreenXpertServicec.exe and ScreenXpertUpgradeServiceManager.exe in ScreenPad2_Upgrade_Tool.msi V1.0.3 for ASUS PCs with ScreenPad 1.0 (UX450FDX, UX550GDX and UX550GEX) could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name.
References
Link | Resource |
---|---|
https://drive.google.com/file/d/1ClzHH5Jw3PgZw74RvKrEP8xU0TUc5Ta0/view?usp=sharing | Third Party Advisory |
https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/ | Vendor Advisory |
https://www.asus.com/support/FAQ/1043674 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2020-07-20T12:42:03
Updated: 2020-07-20T12:42:03
Reserved: 2020-06-24T00:00:00
Link: CVE-2020-15009
JSON object: View
NVD Information
Status : Analyzed
Published: 2020-07-20T13:15:09.717
Modified: 2020-07-29T16:03:16.663
Link: CVE-2020-15009
JSON object: View
Redhat Information
No data.
CWE