Motherboard Rog Maximus Xi Apex
Monthly
Physical access to a range of ASUS Z390-era motherboards - Prime Z390-A, Prime Z390-A/H10, the ROG Maximus XI family (Hero, Hero Wi-Fi, Formula, Code, Extreme, Apex, Gene), ROG Strix Z390-E/F Gaming, Pro WS C246 ACE and WS Z390 Pro - allows an attacker to read and write arbitrary host memory by inserting a specially crafted device, because the platform fails to correctly initialize the protections governing device memory access. The CVSS v4.0 vector (AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, scope unchanged) confirms high confidentiality, integrity and availability impact with no authentication or user interaction required once hands-on access is obtained, but the decisive limiting factor is AV:P: the flaw is unreachable remotely or over a network and is realistically confined to evil-maid, supply-chain, repair-shop or shared-physical-access scenarios. ASUS is credited as the reporter and the vendor security advisory at https://www.asus.com/security-advisory is the authoritative reference; no public exploit identified at time of analysis.
Physical access to a range of ASUS Z390-era motherboards - Prime Z390-A, Prime Z390-A/H10, the ROG Maximus XI family (Hero, Hero Wi-Fi, Formula, Code, Extreme, Apex, Gene), ROG Strix Z390-E/F Gaming, Pro WS C246 ACE and WS Z390 Pro - allows an attacker to read and write arbitrary host memory by inserting a specially crafted device, because the platform fails to correctly initialize the protections governing device memory access. The CVSS v4.0 vector (AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H, scope unchanged) confirms high confidentiality, integrity and availability impact with no authentication or user interaction required once hands-on access is obtained, but the decisive limiting factor is AV:P: the flaw is unreachable remotely or over a network and is realistically confined to evil-maid, supply-chain, repair-shop or shared-physical-access scenarios. ASUS is credited as the reporter and the vendor security advisory at https://www.asus.com/security-advisory is the authoritative reference; no public exploit identified at time of analysis.