TLDR InfoSec · MISCELLANEOUS
ONE-CLICK RCE IN ASUS'S PREINSTALLED DRIVER SOFTWARE
Summary from the TLDR InfoSec newsletter
The author found a serious security flaw in ASUS's DriverHub software that could let hackers run code with admin rights. They explained how the system could be tricked using subdomains and a silent install trick. ASUS fixed the problem after it was reported, but credited someone else.