---
id: CVE-2026-93495
title: >-
  Improper initialization in an ASUS certain motherboard allows an physically
  proximate user to read or write arbitrary memory by inserting a specially
  crafted device.
summary: >-
  Improper initialization in an ASUS certain motherboard allows an physically
  proximate user to read or write arbitrary memory by inserting a specially
  crafted device.
severity: high
cvss: 7
cvssVector: 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'
cwe:
  - CWE-665
vendor: ASUS
product: Motherboard(PRIME Z390-A )
affected:
  - motherboard_prime_z390-a through 2101
  - motherboard_prime_z390-a_h10 through 2101
  - motherboard_rog_maximus_xi_hero through 2101
  - motherboard_rog_maximus_xi_hero_wi-fi through 2101
  - motherboard_rog_maximus_xi_formula through 2101
  - motherboard_rog_maximus_xi_code through 2101
  - motherboard_rog_maximus_xi_extreme through 2101
  - motherboard_rog_maximus_xi_apex through 2101
  - motherboard_rog_maximus_xi_gene through 2101
  - motherboard_rog_strix_z390-e_gaming through 2101
  - motherboard_rog_strix_z390-f_gaming through 2101
  - motherboard_pro_ws_c246-ace through 2101
  - motherboard_ws_z390_pro through 1401
published: '2026-10-01'
updated: '2026-10-01'
sourceUpdated: '2026-10-01T02:16:54.150'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93495'
references:
  - url: 'https://www.asus.com/security-advisory'
    label: 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
tags:
  - nvd
  - cve.org
cvssSource: cna
ingestedAt: '2026-10-01T02:34:58.240Z'
---

## Overview

Improper initialization in an ASUS certain motherboard allows an physically proximate user to read or write arbitrary memory by inserting a specially crafted device.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.