CVE-2018-18536

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The GLCKIo and Asusgio low-level drivers in ASUS Aura Sync v1.07.22 and earlier expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges.

Metrics

CVSS 3.0 7.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/34Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/106250Third Party Advisory, VDB Entry
https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilitiesExploit, Third Party Advisory
http://packetstormsecurity.com/files/150893/ASUS-Driver-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2018/Dec/34Exploit, Mailing List, Third Party Advisory
http://www.securityfocus.com/bid/106250Third Party Advisory, VDB Entry
https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilitiesExploit, Third Party Advisory

Timeline

Published: Dec 26, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-185375.5The GLCKIo low-level driver in ASUS Aura Sync v1.07.22 and earlier exposes a path to write an arbitrary DWORD to an arbitrary address.CVE-2018-185406.1TeaKKi 2.7 allows XSS via a crafted onerror attribute for a picture's URL.CVE-2018-185417.5In Teeworlds before 0.6.5, connection packets could be forged. There was no challenge-response involved in the connection build up. A remote CVE-2018-185446.5There is a memory leak in the function WriteMSLImage of coders/msl.c in ImageMagick 7.0.8-13 Q16, and the function ProcessMSLScript of coder CVE-2018-185456.1Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.CVE-2018-185469.8ThinkPHP 3.2.4 has SQL Injection via the order parameter because the Library/Think/Db/Driver.class.php parseOrder function mishandles the ke CVE-2018-185476.1Vesta Control Panel through 0.9.8-22 has XSS via the edit/web/ domain parameter, the list/backup/ backup parameter, the list/rrd/ period par CVE-2018-185486.1ajenticp (aka Ajenti Docker control panel) for Ajenti through v1.2.23.13 has XSS via a filename that is mishandled in File Manager.CVE-2018-185508.8ServersCheck Monitoring Software before 14.3.4 allows SQL Injection by an authenticated user.CVE-2018-185516.1ServersCheck Monitoring Software through 14.3.3 has Persistent and Reflected XSS via the sensors.html status parameter, sensors.html type pa CVE-2018-185526.5ServersCheck Monitoring Software through 14.3.3 allows local users to cause a denial of service (menu functionality loss) by creating an LNK CVE-2018-185536.1Leanote 2.6.1 has XSS via the Blog Basic Setting title field, which is mishandled during rendering of the "likes" page.