One-Click RCE in Asus's Preinstalled Driver Software

> I asked ASUS if they offered bug bounties. They responded saying they do not, but they would instead put my name in their “hall of fame”. This is understandable since ASUS is just a small startup and likely does not have the capital to pay a bounty.

:(

Re: One-Click RCE in Asus's Preinstalled Driver Software

#5

Post by _pdp_ » Sun, May 11, 2025, 7:58 AM UTC

IshKebab wrote: post #2

Wow, no bug bounty is insane. No more ASUS products for me...

they are a "small startup"

Re: One-Click RCE in Asus's Preinstalled Driver Software

#6

Post by GuestFAUniverse » Sun, May 11, 2025, 7:58 AM UTC

Doesn't surprise me. Their software sucks and security wise they are repeat offenders considering the lack of prevention.

https://www.techspot.com/news/95425-years-gigabyte-asus-moth...

https://www.reddit.com/r/ASUS/comments/tg3u2n/removing_bloat...

https://www.reddit.com/r/ASUS/comments/ojsq80/nahimic_servic...

Re: One-Click RCE in Asus's Preinstalled Driver Software

#7

Post by nexoft » Sun, May 11, 2025, 8:04 AM UTC

I've read Acer for some reason, and was surprise and disappointed it is actually Asus.

Re: One-Click RCE in Asus's Preinstalled Driver Software

#8

Post by charcircuit » Sun, May 11, 2025, 8:04 AM UTC

_pdp_ wrote: post #5

IshKebab wrote: post #2

Wow, no bug bounty is insane. No more ASUS products for me...

they are a "small startup"

They have over 14500 employees. I wouldn't call that small.

Re: One-Click RCE in Asus's Preinstalled Driver Software

#9

Post by Pesthuf » Sun, May 11, 2025, 8:07 AM UTC

charcircuit wrote: post #8

_pdp_ wrote: post #5

Earlier quoted context omitted.

they are a "small startup"

They have over 14500 employees. I wouldn't call that small.

You missed a small amount of sarcasm there

Re: One-Click RCE in Asus's Preinstalled Driver Software

#10

Post by thwaysec » Sun, May 11, 2025, 8:10 AM UTC

[flagged]