Critical · published December 17, 2025
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 67.9th percentile for exploit probability.
🚨 A supply chain compromise has left certain ASUS Live Update clients delivered with unauthorized modifications—what a twist! 🔥 Think of it like receiving a pizza with a surprise ingredient you never ordered—except this topping could cause your device to act unpredictably. Just like a mischievous chef who tweaks your order, attackers can introduce sneaky changes that throw everything off. The ramifications are absolutely devastating! If your device meets the specific targeting conditions and has one of these compromised clients, it could perform unintended actions, leaving your data vulnerable and your device potentially compromised. This isn’t just a minor hiccup; it’s a critical breach just waiting to happen!
Think of it like receiving a pizza with a surprise ingredient you never ordered—except this topping could cause your device to act unpredictably. Just like a mischievous chef who tweaks your order, attackers can introduce sneaky changes that throw everything off. These unauthorized modifications in the ASUS Live Update client can enable attackers to exploit devices that are running vulnerable, unsupported versions by executing unintended commands. This happens due to the alterations made during the supply chain process, allowing control over the device in certain conditions.
The ramifications are absolutely devastating! If your device meets the specific targeting conditions and has one of these compromised clients, it could perform unintended actions, leaving your data vulnerable and your device potentially compromised. This isn’t just a minor hiccup; it’s a critical breach just waiting to happen! If you're still using any version of the ASUS Live Update client, it's time to act! Immediately uninstall the affected version and ensure you're using a device that is still supported and updated. Given that this client has reached its End-of-Support, avoid using any outdated software and proactively check for updates from trusted sources. 🔒 You've got this! By taking these steps, you're not just fixing the problem, you're helping keep the internet safer for everyone! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| asus/live_update | < 3.6.8 | 3.6.8 |