TLDR InfoSec · MISCELLANEOUS

ONE-CLICK RCE IN ASUS'S PREINSTALLED DRIVER SOFTWARE

mrbruh.com10 min read

Summary from the TLDR InfoSec newsletter

The author found a serious security flaw in ASUS's DriverHub software that could let hackers run code with admin rights. They explained how the system could be tricked using subdomains and a silent install trick. ASUS fixed the problem after it was reported, but credited someone else.