CVE-2025-13348 – ASUS Business Manager Arbitrary File Creation Vulnerability

CVE ID : CVE-2025-13348

Published : Feb. 2, 2026, 2:16 a.m. | 59 minutes ago

Description : An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager. This vulnerability can be triggered by a local user sending a specially crafted request, potentially leading to the creation of arbitrary files in a specified path. Refer to the “Security Update for ASUS Business Manager” section on the ASUS Security Advisory for more information.

Severity: 8.5 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…