ASUS DriverHub Flaw: When “One-Click RCE” is Just a Click Away!
Security researcher MrBruh found two vulnerabilities in Asus’s pre-installed DriverHub, allowing remote code execution with a single click. The exploit involves cleverly bypassing domain checks, transforming the mundane task of updating drivers into a hacker’s delight. Asus responded by offering MrBruh a spot in their “hall of fame” instead of a bug bounty.
Hot Take:
It seems ASUS DriverHub was caught with its digital pants down, allowing anyone with a crafty URL to hijack the computer like it was a game of “Grand Theft Auto: Cyber Edition.” Not only did ASUS have a wild card domain issue, but when poked, it turned out their “Silent Install” feature was less silent and more of a loud invitation for mischief. ASUS, maybe it’s time to trade the hall of fame for a bug bounty. Just a thought!
Key Points:
– Security researcher ‘MrBruh’ found two critical vulnerabilities in ASUS DriverHub.
– Vulnerabilities allow remote code execution via crafted HTTP requests.
– The flaws are due to insufficient validation and wildcard domain matching.
– Exploit chain involves a spoofed subdomain downloading and installing malicious software.
– ASUS released security updates but does not offer bug bounties.