CVE-2024-33221

7.8 highEPSS 0.2%

High (7.8). EPSS 0.2% chance of exploitation in the next 30 days.

An issue in the component AsusBSItf.sys of ASUSTeK Computer Inc ASUS BIOS Flash Driver v3.2.12.0 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.

Severity

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-782
Published: 2024-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33221
https://github.com/DriverHunter/Win-Driver-EXP/tree/main/CVE-2024-33221

Check your stack JSON