Security Advisory
CVE-2022-21933
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.