title: ASUS Armoury Crate Service - Arbitrary File Creation via Elevation of Privilege Flaw
description: Armoury Crate Service’s logging function has insufficient validation to check if the log file is a symbolic link. A physical attacker with general user privilege can modify the log file property to a symbolic link that points to arbitrary system file, causing the logging function to overwrite the system file and disrupt the system.
problem types: CWE-59 Improper Link Resolution Before File Access ('Link Following')
affected:
{
product: Armoury Crate Service
vendor: ASUS
versions:
status: affected, version: 5.1.5.0
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: PHYSICAL
availabilityImpact: HIGH
baseScore: 5.9
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]
solutions: Update Armoury Crate Service version to V5.2.10.0