← back
CVE-2022-26668highCWE-269

ASUS Control Center - Broken Access Control

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.9%
exploitation probability
0.9%top 42% of all CVEs
observed exploitation
nono source reports it
ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privileged API functions to perform partial system operations or cause partial disrupt of service.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected products
ASUS · Control Center