The vulnerability in ASUS Armoury Crate involves improper restriction of software interfaces to hardware features, enabling a local user to bypass driver authentication mechanisms. This allows modification of hardware configuration settings and access to critical model-specific registers, which could potentially cause hardware damage. The issue is identified as CWE-1256 and has a moderate severity rating. No known exploits are reported in the wild, and no patch or remediation details are provided in the available data. The vulnerability affects local users with limited privileges and does not require user interaction.

A local user with limited privileges can bypass driver authentication to modify hardware configuration settings, potentially causing hardware damage by accessing critical model-specific registers. There is no indication of remote exploitation or user interaction requirements. No known active exploitation has been reported.

Patch status is not yet confirmed — check the ASUS Security Advisory for current remediation guidance. Since no patch links or official fix information are provided, users should monitor ASUS advisories for updates. Until a fix is available, restricting local access to trusted users and limiting permissions may reduce risk.