Carzy Zarx’s PC Gaming Emporium - Catch Up on All the Latest PC Gaming Related News

[JEMC]

Attention users of several Asus products:

Update your MyAsus software now because there's a fix for a nasty hack that could easily ruin your day
https://www.pcgamer.com/hardware/motherboards/update-your-myasus-software-now-because-theres-a-fix-for-a-nasty-hack-that-could-easily-ruin-your-day/
If you have an Asus PC, laptop, AIO, or mini PC, you might want to make sure your pre-installed apps are up-to-date. That's generally always good advice, but with the patching of a high-severity exploit in Asus' MyAsus app, it's particularly true right now.

As posted to the Asus security board, "An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent." With this, an attacker could mess with the app, "potentially resulting in arbitrary code execution". From here, the attacker could have a pretty serious level of access to your rig.

As shared in the security record, this problem is of high severity, with a score of 8.5. Luckily, attackers need local access, so that certainly makes the exploit a little less worrisome. In this case, that severity is likely linked to how dire access would be, as opposed to how easy it is to pull off, as needing local access cuts out 99% of the world from your rig.

This vulnerability affects 64-bit machines before update v3.1.49.0 or before v1.1.37.0 and ARM machines before update v3.2.50.0. If you're looking to update your MyAsus, it should automatically do so via the Microsoft Store.