One-Click RCE in ASUS’s Preinstalled Driver Software Part Two of the ASUS series is out, read it here.
Introduction This story begins with a conversation about new PC parts.
After ignoring the advice from my friend, I bought a new ASUS motherboard for my PC. I was a little concerned about having a BIOS that would by default silently install software into my OS in the background. But it could be turned off so I figured I would just do that.
This person is getting to be fucking annoying.
The title is definitely not as described, only applies to Windows (I think), and won’t work without a permissions escalation.
The only reason it’s classified as a CVE is because they requested it be such.
There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic “hacks” for a few years, and makes a mountain out of an anthill every damn time.
🙄 Ugh