ASUS ASUS Business System Control Interface

• CVE-2025-15038 Medium 6.9 An Out-of-Bounds Read vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially crafted IOCTL  r 0.1%
• CVE-2025-15037 Medium 6.8 An Incorrect Permission Assignment vulnerability exists in the ASUS Business System Control Interface driver. This vulnerability can be triggered by an unprivileged local user sending a specially craf <0.1%