One-Click RCE in ASUS DriverHub: A Shocking Vulnerability

A security researcher discovered a critical vulnerability in ASUS's pre-installed DriverHub software allowing for one-click remote code execution (RCE). The vulnerability stems from insecure RPC handling, enabling attackers to bypass origin checks and execute arbitrary code with administrative privileges. The researcher responsibly disclosed the flaw, and ASUS has since released a patch. Importantly, this impacts any system with DriverHub installed, not just ASUS motherboards. The researcher's detailed exploit chain highlights the severity and potential impact of this vulnerability.