ASUS ROG Peripheral Driver Privilege Escalation Vulnerability

A vulnerability allowing privilege escalation to SYSTEM has been identified in the ASUS ROG peripheral driver installation process. This issue arises from improper access control in the installation directory, which creates a race condition. Exploitation involves replacing the legitimate installer with a malicious payload right after it is downloaded, leading to arbitrary code execution.

Impact

Exploitation of this vulnerability allows for unauthorized privilege escalation to the SYSTEM level, enabling a user to execute arbitrary code with high-level permissions.

Remediation

Users are advised to update to the latest version of the ASUS ROG peripheral driver. The updated version for the headset driver is v1.00.12 and for the mouse driver is v1.00.66.