DriverHub, ASUS’ official driver management tool, was carrying a critical vulnerability that allowed threat actors to execute malicious code on affected devices, remotely. It was recently ...

DriverHub is an Asus driver management tool that is completely autonomous and runs in the background, automatically installing critical drivers for Asus-branded or Asus-equipped systems when needed.

The ASUS DriverHub driver management utility was vulnerable to a critical remote code execution flaw that allowed malicious sites to execute commands on devices with the software installed.

Unfortunately, if we think of DriverHub as a somewhat exclusive club, it needs to fire its bouncer as it will also let in driverhub.asus.com.but.with.funny.glasses.and.a.trenchcoat.com.

" Asus recognizes recent reports from security researchers concerning potential software issues with MyAsus, Armoury Crate, DriverHub, and certain Asus router models.

It can receive any kind of HTTP request, but it attempts to validate said request came from driverhub.asus.com. Problem #1 is that this validation isn't strict, meaning that providing driverhub ...

Asus distributes updates for "DriverHub" itself via this faulty automatic update system and provides Armoury Crate in the corrected version v6.1.13 for download.