ASUS VivoMini/Mini PC - improper input validation
Priority LOW 34CWE-20Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-787 and the CVSS impact.
Summary
ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary code execution for controlling the system or disrupting service.
Why it matters now
EPSS 0.00269 19th percentileScored 2026-11-07
Fix Fixed VC65-C1 (ASUS): 1302PB60V (ASUS): 1302+11 more products
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ASUS | VC65-C1 | before 1302 | 1302 | Patch available | CNA |
| ASUS | PB60V | before 1302 | 1302 | Patch available | CNA |
| ASUS | PB60G | before 1302 | 1302 | Patch available | CNA |
| ASUS | PB60S | before 1302 | 1302 | Patch available | CNA |
| ASUS | PA90 | before 1401 | 1401 | Patch available | CNA |
| ASUS | PB50 | before 902 | 902 | Patch available | CNA |
| ASUS | PB60 | before 1502 | 1502 | Patch available | CNA |
| ASUS | PB61V | before 601 | 601 | Patch available | CNA |
| ASUS | TS10 | before 609 | 609 | Patch available | CNA |
| ASUS | PN40 | before 2201 | 2201 | Patch available | CNA |
| ASUS | PN60 | before 808 | 808 | Patch available | CNA |
| ASUS | PN30 | before 320 | 320 | Patch available | CNA |
| ASUS | UN65U | before 618 | 618 | Patch available | CNA |
- VC65-C1 VendorASUS Affected before 1302 Fixed in 1302 Patch available CNA
- PB60V VendorASUS Affected before 1302 Fixed in 1302 Patch available CNA
- PB60G VendorASUS Affected before 1302 Fixed in 1302 Patch available CNA
- PB60S VendorASUS Affected before 1302 Fixed in 1302 Patch available CNA
- PA90 VendorASUS Affected before 1401 Fixed in 1401 Patch available CNA
- PB50 VendorASUS Affected before 902 Fixed in 902 Patch available CNA
- PB60 VendorASUS Affected before 1502 Fixed in 1502 Patch available CNA
- PB61V VendorASUS Affected before 601 Fixed in 601 Patch available CNA
- TS10 VendorASUS Affected before 609 Fixed in 609 Patch available CNA
- PN40 VendorASUS Affected before 2201 Fixed in 2201 Patch available CNA
- PN60 VendorASUS Affected before 808 Fixed in 808 Patch available CNA
- PN30 VendorASUS Affected before 320 Fixed in 320 Patch available CNA
- UN65U VendorASUS Affected before 618 Fixed in 618 Patch available CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:vc65-c1_firmware:*:*:*:*:*:*:*:* | before 1302 | Vulnerable | ASUS |
| cpe:2.3:h:asus:vc65-c1:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pb60v_firmware:*:*:*:*:*:*:*:* | before 1302 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pb60v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pb60g_firmware:*:*:*:*:*:*:*:* | before 1302 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pb60g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pb60s_firmware:*:*:*:*:*:*:*:* | before 1302 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pb60s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pa90_firmware:*:*:*:*:*:*:*:* | before 1401 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pa90:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:vc65-c1_firmware:*:*:*:*:*:*:*:* Versions before 1302 Vulnerable ·ASUS
- cpe:2.3:h:asus:vc65-c1:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pb60v_firmware:*:*:*:*:*:*:*:* Versions before 1302 Vulnerable ·ASUS
- cpe:2.3:h:asus:pb60v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pb60g_firmware:*:*:*:*:*:*:*:* Versions before 1302 Vulnerable ·ASUS
- cpe:2.3:h:asus:pb60g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pb60s_firmware:*:*:*:*:*:*:*:* Versions before 1302 Vulnerable ·ASUS
- cpe:2.3:h:asus:pb60s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pa90_firmware:*:*:*:*:*:*:*:* Versions before 1401 Vulnerable ·ASUS
- cpe:2.3:h:asus:pa90:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:asus:pb50_firmware:*:*:*:*:*:*:*:* | before 902 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pb50:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pb60_firmware:*:*:*:*:*:*:*:* | before 1502 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pb60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pb61v_firmware:*:*:*:*:*:*:*:* | before 601 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pb61v:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:ts10_firmware:*:*:*:*:*:*:*:* | before 609 | Vulnerable | ASUS |
| cpe:2.3:h:asus:ts10:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pn40_firmware:*:*:*:*:*:*:*:* | before 2201 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pn40:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pn60_firmware:*:*:*:*:*:*:*:* | before 808 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pn60:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:pn30_firmware:*:*:*:*:*:*:*:* | before 320 | Vulnerable | ASUS |
| cpe:2.3:h:asus:pn30:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
| cpe:2.3:o:asus:un65u_firmware:*:*:*:*:*:*:*:* | before 618 | Vulnerable | ASUS |
| cpe:2.3:h:asus:un65u:-:*:*:*:*:*:*:* | not specified by NVD | Running on | ASUS |
- cpe:2.3:o:asus:pb50_firmware:*:*:*:*:*:*:*:* Versions before 902 Vulnerable ·ASUS
- cpe:2.3:h:asus:pb50:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pb60_firmware:*:*:*:*:*:*:*:* Versions before 1502 Vulnerable ·ASUS
- cpe:2.3:h:asus:pb60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pb61v_firmware:*:*:*:*:*:*:*:* Versions before 601 Vulnerable ·ASUS
- cpe:2.3:h:asus:pb61v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:ts10_firmware:*:*:*:*:*:*:*:* Versions before 609 Vulnerable ·ASUS
- cpe:2.3:h:asus:ts10:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pn40_firmware:*:*:*:*:*:*:*:* Versions before 2201 Vulnerable ·ASUS
- cpe:2.3:h:asus:pn40:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pn60_firmware:*:*:*:*:*:*:*:* Versions before 808 Vulnerable ·ASUS
- cpe:2.3:h:asus:pn60:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:pn30_firmware:*:*:*:*:*:*:*:* Versions before 320 Vulnerable ·ASUS
- cpe:2.3:h:asus:pn30:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
- cpe:2.3:o:asus:un65u_firmware:*:*:*:*:*:*:*:* Versions before 618 Vulnerable ·ASUS
- cpe:2.3:h:asus:un65u:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·ASUS
Remediation
- Fix · CNA VC65-C1 (ASUS) Fixed in 1302
- Fix · CNA PB60V (ASUS) Fixed in 1302
- Fix · CNA PB60G (ASUS) Fixed in 1302
- Fix · CNA PB60S (ASUS) Fixed in 1302
- Fix · CNA PA90 (ASUS) Fixed in 1401
- Fix · CNA PB50 (ASUS) Fixed in 902
- Fix · CNA PB60 (ASUS) Fixed in 1502
- Fix · CNA PB61V (ASUS) Fixed in 601
- Fix · CNA TS10 (ASUS) Fixed in 609
- Fix · CNA PN40 (ASUS) Fixed in 2201
- Fix · CNA PN60 (ASUS) Fixed in 808
- Fix · CNA PN30 (ASUS) Fixed in 320
- Fix · CNA UN65U (ASUS) Fixed in 618
Timeline
- 2026-10-02 Threatist record created from CVE-2022-21933
- 2026-10-03 Alias added: GHSA-qjg9-wm29-5rcr
References
Sources
- CVE-2022-21933 · CVE Program
- CVE-2022-21933 · NVD
- FIRST EPSS
- GHSA-qjg9-wm29-5rcr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences