Not scored
CVE-2025-13348
ASUS Business Manager vulnerability
ASUSASUS Business Manager
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.1%probability of exploitation in the next 30 days
Higher than 2% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the "Security Update for ASUS Business Manager" section on the ASUS Security Advisory for more information.
Coverage 1 article · 1 outlet
- ASUS Kills “File Shredder” Feature to Fix Critical FlawSecurityOnline · first in our coverage