CVE-2020-10649

PoC —

CVSS 3.1

7.8 high

EPSS

<1%p47

Published

Mar 25, 2020 (Mar 25, 2020)

Modified

Jun 17, 2026

Description

DevActSvc.exe in ASUS Device Activation before 1.0.7.0 for Windows 10 notebooks and PCs could lead to unsigned code execution with no additional restrictions when a user puts an application at a particular path with a particular file name.

Vendors: asus
Products: device activation
Weakness: CWE-427
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.