Asus routers contain a critical vulnerability allowing unauthorized remote access and command injection

Security researcher MrBruh has discovered a critical vulnerability in Asus routers that allows an attacker to bypass authentication and execute arbitrary commands. By exploiting this flaw, an attacker can gain persistent, unauthorized access to the router, which can then be used to compromise other devices on the network, such as smart TVs. The exploit involves sending a specially crafted request to the router's NTP server configuration, which allows for command injection. The vulnerability is particularly dangerous because it can be chained with other exploits to perform more complex attacks, such as streaming audio and video from connected devices to a remote server. The researcher has also highlighted that Asus's mobile app, which is used to manage the router, can be used to facilitate this exploit. Asus has been slow to release patches for all affected models, and the company has not provided a full list of affected devices, making it difficult for users to know if their routers are vulnerable. Users are advised to avoid using the Asus mobile app and to configure their routers locally whenever possible.

Tech4K Staff39:11 watch

Security researcher MrBruh has discovered a critical vulnerability in Asus routers that allows an attacker to bypass authentication and execute arbitrary commands. By exploiting this flaw, an attacker can gain persistent, unauthorized access to the router, which can then be used to compromise other devices on the network, such as smart TVs. The exploit involves sending a specially crafted request to the router's NTP server configuration, which allows for command injection. The vulnerability is particularly dangerous because it can be chained with other exploits to perform more complex attacks, such as streaming audio and video from connected devices to a remote server. The researcher has also highlighted that Asus's mobile app, which is used to manage the router, can be used to facilitate this exploit. Asus has been slow to release patches for all affected models, and the company has not provided a full list of affected devices, making it difficult for users to know if their routers are vulnerable. Users are advised to avoid using the Asus mobile app and to configure their routers locally whenever possible.

A critical vulnerability in Asus routers allows attackers to bypass authentication and execute arbitrary commands. The exploit can be used to gain persistent, unauthorized access to the router and compromise other devices on the network.

Attackers can chain this vulnerability with other exploits to perform advanced attacks, such as streaming audio and video. Asus has been slow to release patches and has not provided a comprehensive list of affected router models.

Users are advised to avoid using the Asus mobile app and to configure their routers locally to mitigate risks.

Chapter guide

Introduction to the Asus router vulnerabilityOverview of the critical security flaw discovered in Asus routers.The potential for exploit chainingExplanation of how this vulnerability can be chained with others to compromise connected devices.Proof of concept and technical detailsA detailed look at the vulnerability and how it can be exploited.Demonstration of the exploitA practical demonstration of how an attacker can gain access to the router.Compromising connected devicesDemonstration of how the exploit can be used to compromise a smart TV.Asus's response and patching processDiscussion of Asus's slow response and the status of firmware updates.Mitigation strategies for usersRecommendations for users to protect their routers from this vulnerability.

Worth noting

  • The researcher's estimate of 25-30 million affected devices is based on limited data and has not been verified by Asus.
  • The vulnerability disclosure process is ongoing, and the full extent of the impact is not yet known.

Watch the original video ↗