CVE-2019-19235

HIGH

ASUS ATK Package < 1.0.0061 - Uncontrolled Search Path Element via AsLdrSrv.exe

Title source: llm
STIX 2.1

Description

AsLdrSrv.exe in ASUS ATK Package before V1.0.0061 (for Windows 10 notebook PCs) could lead to unsigned code execution with no additional execution. The user must put an application at a particular path, with a particular file name.

References (3)

Core 3
Core References
Third Party Advisory x_refsource_misc
https://safebreach.com/blog
Vendor Advisory x_refsource_misc
https://www.asus.com/support/faq/1041545

Scores

CVSS v3 7.0
EPSS 0.0005
EPSS Percentile 16.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-427
Status published
Products (1)
asus/atk_package < 1.0.0061
Published Dec 18, 2019
Tracked Since Feb 18, 2026