ASUS Asci vulnerabilities

2 CVEs affecting ASUS Asci, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-2027, published 2025-03-28.

More from ASUS.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-55408, published 2025-01-06. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. An improper access control vulnerability in the AsusSAIO.sys driver may lead to the misuse of software functionality utilizing the driver when crafted IOCTL requests are supplied.
• CVE-2025-2027, published 2025-03-28. Medium severity, CVSS 5.9. EPSS: 0.2% chance of exploitation in the next 30 days. A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending specially crafted local RPC requests, leading to the service crash…