One-Click RCE in ASUS's Preinstalled Driver Software
Technology
9
Beiträge
8
Kommentatoren
96
Aufrufe
-
This post did not contain any content.
One-Click RCE in ASUS's Preinstalled Driver Software
One-Click RCE in ASUS’s Preinstalled Driver Software Part Two of the ASUS series is out, read it here. Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard for my PC. I was a little concerned about having a BIOS that would by default silently install software into my OS in the background. But it could be turned off so I figured I would just do that.
(mrbruh.com)
-
This post did not contain any content.
One-Click RCE in ASUS's Preinstalled Driver Software
One-Click RCE in ASUS’s Preinstalled Driver Software Part Two of the ASUS series is out, read it here. Introduction This story begins with a conversation about new PC parts. After ignoring the advice from my friend, I bought a new ASUS motherboard for my PC. I was a little concerned about having a BIOS that would by default silently install software into my OS in the background. But it could be turned off so I figured I would just do that.
(mrbruh.com)
This person is getting to be fucking annoying.
The title is definitely not as described, only applies to Windows (I think), and won't work without a permissions escalation.
The only reason it's classified as a CVE is because they requested it be such.
There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic "hacks" for a few years, and makes a mountain out of an anthill every damn time.
Ugh -
This person is getting to be fucking annoying.
The title is definitely not as described, only applies to Windows (I think), and won't work without a permissions escalation.
The only reason it's classified as a CVE is because they requested it be such.
There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic "hacks" for a few years, and makes a mountain out of an anthill every damn time.
UghThis person is getting to be fucking annoying.
️ Sounds like a job for the "block user" feature... 
-
This person is getting to be fucking annoying.
The title is definitely not as described, only applies to Windows (I think), and won't work without a permissions escalation.
The only reason it's classified as a CVE is because they requested it be such.
There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic "hacks" for a few years, and makes a mountain out of an anthill every damn time.
UghHow could it apply to any other operating system than Windows? Pre installed drivers, in a pre installed OS? They probably don't even write drivers for other OS
-
How could it apply to any other operating system than Windows? Pre installed drivers, in a pre installed OS? They probably don't even write drivers for other OS
Wine or compatibility layers.
-
This person is getting to be fucking annoying.
The title is definitely not as described, only applies to Windows (I think), and won't work without a permissions escalation.
The only reason it's classified as a CVE is because they requested it be such.
There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic "hacks" for a few years, and makes a mountain out of an anthill every damn time.
Ughonly applies to Windows (I think)
Well yeah, its a vulnerability in the windows software. Nothing they said implied otherwise.
and won't work without a permissions escalation.
I dont think thats true, could you explain why that would be? This article mentioned no need for a permissions escalation. In fact it seems that the RCE is automatically run as administrator by the driver process.
-
This person is getting to be fucking annoying.
The title is definitely not as described, only applies to Windows (I think), and won't work without a permissions escalation.
The only reason it's classified as a CVE is because they requested it be such.
There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic "hacks" for a few years, and makes a mountain out of an anthill every damn time.
Ugh"This only applies to the most widely used OS and won't work without someone clicking grant admin permissions which most people probably do blindly."
Ugh -
only applies to Windows (I think)
Well yeah, its a vulnerability in the windows software. Nothing they said implied otherwise.
and won't work without a permissions escalation.
I dont think thats true, could you explain why that would be? This article mentioned no need for a permissions escalation. In fact it seems that the RCE is automatically run as administrator by the driver process.
I love how on Lemmy Windows is not immediately assumed to be the default OS, lol.
Are we all Linux users?
-
I love how on Lemmy Windows is not immediately assumed to be the default OS, lol.
Are we all Linux users?
Yeah, Lemmy has a VERY large Linux user base, which means Windows discussions tend to get mocked or dismissed. But the reality is that Windows is still the dominant OS for the vast majority of users, by leaps and bounds. Linux runs the world’s infrastructure, but Windows is what the average user boots up every day.
“This exploit only works on the average user’s OS. And it only works if the user clicks the “yes” button to escalate permissions, which they have been conditioned to always do without question. Obviously this isn’t an exploit to worry about.”
