CVE-2022-21933

Publication date

2022-01-21 09:05:12

Family

twcert

State

PUBLISHED

Description

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.