Soldato
- Joined
- 21 Jan 2003
- Posts
- 7,110
- Location
- Northamptonshire
Morning all,
Just saw this pop up on one of my security RSS feeds and thought it was worth a share — thanks for the morning jolt, ASUS!
www.bleepingcomputer.com
Turns out the ASUS DriverHub utility had a rather nasty vulnerability that could let malicious websites run commands with admin rights. Not ideal!
The issue was spotted by a sharp-eyed independent researcher from New Zealand (shoutout to Paul, aka “MrBruh”), who found that the software wasn’t properly validating commands sent to its background service. This opened the door to an exploit chain involving CVE-2025-3462 and CVE-2025-3463 — fancy names for flaws that, when combined, could let someone remotely run code on affected machines.
The good news? ASUS has since patched it — and the issue only affects ASUS motherboards.
So if you're running an ASUS system, give those core drivers a quick update. Stay safe out there, peeps!
Just saw this pop up on one of my security RSS feeds and thought it was worth a share — thanks for the morning jolt, ASUS!
ASUS DriverHub flaw let malicious sites run commands with admin rights
The ASUS DriverHub driver management utility was vulnerable to a critical remote code execution flaw that allowed malicious sites to execute commands on devices with the software installed.
Turns out the ASUS DriverHub utility had a rather nasty vulnerability that could let malicious websites run commands with admin rights. Not ideal!
The issue was spotted by a sharp-eyed independent researcher from New Zealand (shoutout to Paul, aka “MrBruh”), who found that the software wasn’t properly validating commands sent to its background service. This opened the door to an exploit chain involving CVE-2025-3462 and CVE-2025-3463 — fancy names for flaws that, when combined, could let someone remotely run code on affected machines.
The good news? ASUS has since patched it — and the issue only affects ASUS motherboards.
So if you're running an ASUS system, give those core drivers a quick update. Stay safe out there, peeps!
