Asus Aura Sync Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Asus Aura Sync Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-18535 — CVSS 7.8 (high): The Asusgio low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes functionality to read and write Machine Specific Registers…
• CVE-2018-18536 — CVSS 7.8 (high): The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports…
• CVE-2018-18537 — CVSS 5.5 (medium): The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.