Skip to content
ASUSCVE-2026-12962

ASUS Armoury Crate: remote user could obtain a local user's NTLM hash

Medium5.3CVE-2026-12962 · Published Sep 8, 2026 · updated Sep 17, 2026

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Security Update for Armoury Crate App ' section on the ASUS Security Advisory for more information.

ASUS advisory

Affected versions

PackageAffectedFixed in
Armoury Crate
Product
<= through 6.5.7.0No fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-942

More ASUS advisories

All ASUS
Advisory
ASUS Armoury Crate: local user could modify hardware configuration settings
Medium5.8Sep 8
ASUS Armoury Crate: information disclosure
Medium5.7Sep 8
ASUS Control Center Express Agent: missing authentication
High7.7Sep 8
ASUS Armoury Crate: denial of service
Medium5.7Sep 8
ASUS Armoury Crate: improper access control
Medium5.9Sep 8
ASUS Armoury Crate: denial of service
Medium5.7Sep 8

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.