One-Click RCE in ASUS’s Preinstalled Driver Software

[Mr Evil]

There's a vulnerability in Asus' "DriverHub" that can be exploited by merely visiting a malicious website, which can then execute arbitrary code with admin rights. DriverHub is automatically installed by Asus motherboards. I expect most people here will have this stuff diasabled in the BIOS, but it's really easy to forget to do that. It's been fixed, so update if you're affected.

Details here: https://mrbruh.com/asusdriverhub/

 

[ManofGod]

Asus driver and monitoring software could go away and no one would miss it.

 

[kirbyrj]

Asus driver and monitoring software could go away and no one would miss it.

FWIW, it can be handy on things like the ROG Ally. Regular motherboard...not using it.

 

[philb2]

There's a vulnerability in Asus' "DriverHub" that can be exploited by merely visiting a malicious website, which can then execute arbitrary code with admin rights. DriverHub is automatically installed by Asus motherboards. I expect most people here will have this stuff diasabled in the BIOS, but it's really easy to forget to do that. It's been fixed, so update if you're affected.

Details here: https://mrbruh.com/asusdriverhub/

Starting with which motherboard chipset versions. I have an ROG Strix AMD 670E board, and I don't get these updates. In fact, when I have downloaded drives from the ASUS website and try to execute them, NOTHING happens. Still don't have Wi-Fi working, but I rely on Ethernet to my mesh router for connectivity. Windows 10, to be sure.

 

[Mr Evil]

Starting with which motherboard chipset versions.

I don't know any more than you can read in the linked article. The related CVEs only mention the affected versions of DriverHub, not what motherboards might cause it to be installed. I don't think it matters though - if it's not installed then you're not affected.

 

[Ranulfo]

So another vulnerability or am I mis-remembering this being a thing with asus' monitor software before?

 

[Armenius]

Starting with which motherboard chipset versions. I have an ROG Strix AMD 670E board, and I don't get these updates. In fact, when I have downloaded drives from the ASUS website and try to execute them, NOTHING happens. Still don't have Wi-Fi working, but I rely on Ethernet to my mesh router for connectivity. Windows 10, to be sure.

I had to install the Wifi driver the old fashioned way on mine by going into device manager and pointing it to the .inf file. On modern Windows you can also right-click the .inf file and click install in the context menu.

 

[Mr Evil]

So another vulnerability or am I mis-remembering this being a thing with asus' monitor software before?

This one's brand new, with CVEs dated only a few days ago.

 

[zerogg]

There's a vulnerability in Asus' "DriverHub" that can be exploited by merely visiting a malicious website, which can then execute arbitrary code with admin rights. DriverHub is automatically installed by Asus motherboards. I expect most people here will have this stuff diasabled in the BIOS, but it's really easy to forget to do that. It's been fixed, so update if you're affected.

Details here: https://mrbruh.com/asusdriverhub/

Thanks for the reminder