CVE-2026-7480
Awaiting Analysis Awaiting Analysis - Queue

Incorrect Permission Assignment in ASUS System Control Interface

Publication date: 2026-05-29

Last updated on: 2026-05-29

Assigner: ASUS

Description
An Incorrect Permission Assignment for Critical Resource vulnerability in ASUS System Control Interface allows a local user to elevate privileges to SYSTEM and execute arbitrary code via a crafted RPC call that bypass the validation mechanism. Refer to the 'Security Update for ASUS System Control Interface' section on the ASUS Security Advisory for more information.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-05-29
Last Modified
2026-05-29
Generated
2026-07-09
AI Q&A
2026-05-29
EPSS Evaluated
2026-07-08
NVD
CVE-2026-7480
EUVD
EUVD-2026-33245

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
asus system_control_interface *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-732 The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an Incorrect Permission Assignment for a Critical Resource in the ASUS System Control Interface. It allows a local user to elevate their privileges to SYSTEM level and execute arbitrary code by using a specially crafted RPC call that bypasses the normal validation mechanisms.

Impact Analysis

The vulnerability can allow a local attacker to gain SYSTEM-level privileges, which is the highest level of access on the affected system. This means the attacker can execute any code they want with full control over the system, potentially leading to complete system compromise.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-7480. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart