29
One-Click RCE in ASUS's Preinstalled Driver Software (mrbruh.com)
submitted 1 year ago by to c/technology@lemmy.world
6 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 0 points 1 year ago* (last edited 1 year ago) (5 children)

This person is getting to be fucking annoying.

The title is definitely not as described, only applies to Windows (I think), and won't work without a permissions escalation.

The only reason it's classified as a CVE is because they requested it be such.

There are no payload attacks proven here, or PoC attack code. This person has been posting pretty basic "hacks" for a few years, and makes a mountain out of an anthill every damn time.

🙄 Ugh

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 2 points 1 year ago

    only applies to Windows (I think)

    Well yeah, its a vulnerability in the windows software. Nothing they said implied otherwise.

    and won't work without a permissions escalation.

    I dont think thats true, could you explain why that would be? This article mentioned no need for a permissions escalation. In fact it seems that the RCE is automatically run as administrator by the driver process.

  • permalink
  • fedilink
  • source
  • parent