asrock vulnerabilities

Recent CVEs affecting asrock products. 6 tracked.

asrock has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 5. Most recent: 2021-07-23. Highest priority: CVE-2020-14032 (score 65/100).

• CVE-2020-15368 MEDIUM 5.5 MITIGATE AsrDrv103.sys in the ASRock RGB Driver does not properly restrict access from user space, as demonstrated by t
• CVE-2020-14032 CRITICAL 9.8 UPGRADE ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.
• CVE-2018-10712 HIGH 7.8 UPGRADE UPGRADE The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.
• CVE-2018-10711 HIGH 7.8 UPGRADE UPGRADE The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.
• CVE-2018-10710 HIGH 7.1 UPGRADE UPGRADE The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.
• CVE-2018-10709 HIGH 7.8 UPGRADE UPGRADE The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.

FAQ

How do I fix asrock vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is asrock being exploited right now?

None of the tracked asrock CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which asrock CVE should I patch first?

CVE-2020-14032 currently ranks highest (65/100): ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM..

Products

• a-tuning
• box-r1000 firmware
• f-stream
• restart to uefi
• rgb driver firmware
• rgbled

RSS feed for asrock · ← Back to latest CVEs