Vulnerability Details CVE-2019-10709
AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.097
EPSS Ranking 92.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html
- https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html
- http://packetstormsecurity.com/files/154259/Asus-Precision-TouchPad-11.0.0.25-Denial-Of-Service-Privilege-Escalation.html
- https://blog.telspace.co.za/2019/08/tsa-2019-001-asus-precision-touchpad.html
Products affected by CVE-2019-10709
-
cpe:2.3:a:asus:precision_touchpad:11.0.0.25