4 ms·

Didn't Duo Security already expose this? https://duo.com/assets/pdf/out-of-box-exploitation_oem-updaters.pdf https://duo.com/assets/pdf/out-of-box-exploitation

• Redoubts 10y ago
  > Asus appears to be one of the worst OEMs we looked at, providing attackers with functionality that can only be referred to as remote code execution as a service. Ouch.
• jwcrux 10y ago
  Yes, this was one of the 9+ vulns they found.