1. Home
  2. CVE Database
  3. CVE-2022-22262
HIGH · 7.7

CVE-2022-22262

ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before dele...

Vulnerability Description

ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before deletion, an unauthenticated local attacker can create an unexpected symbolic link to system file path, to delete arbitrary system files and disrupt system service.

CVSS Score

7.7

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
AsusRog Live Service< 1.3.3.0

Related Weaknesses (CWE)

CWE-59

References

FAQ

What is CVE-2022-22262?

CVE-2022-22262 is a vulnerability with a CVSS score of 7.7 (HIGH). ROG Live Service’s function for deleting temp files created by installation has an improper link resolution before file access vulnerability. Since this function does not validate the path before dele...

How severe is CVE-2022-22262?

CVE-2022-22262 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-22262?

Check the references section above for vendor advisories and patch information. Affected products include: Asus Rog Live Service.