VULNERABILITY INTELLIGENCE
CVE-2025-13348
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-02-02
Last modified2026-06-17
Description
An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.
Weakness classification
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-862