The vulnerability is an insufficient integrity verification in the installation process of ASUS ROG peripheral drivers. Improper access control on the driver installation directory creates a race condition that allows a local user to replace the legitimate installer with malicious code immediately after download. Targeting this flaw can lead to arbitrary code execution and privilege escalation to SYSTEM, compromising system integrity and any data handled by the affected components. This weakness is related to CWE‑494.

Affected systems are ASUS ROG peripheral drivers for headset, keyboard, and mouse devices. The CVE data does not list specific vulnerable versions, so all publicly released drivers prior to the security update are potentially susceptible.

The stated CVSS base score is 5.4, indicating moderate severity. The EPSS score is below 1%, suggesting a low likelihood of current exploitation. The vulnerability is not listed in the CISA KEV catalog. Based on the description it is inferred that the attack vector requires local file system write access to the installer directory, so a local attacker with user privileges can trigger the race condition. If the exploit is successfully triggered, the attacker can execute arbitrary code with SYSTEM privileges.