CISA Alerts on ASUS Live Update CVE: Old Vulnerability Still a Risk for Unpatched Systems

Have you ever come across a security alert and thought, 'Should I worry about this?'. I have recently been confronted with this question and have seen a recent CISA alert for a CVE concerning ASUS Live Update. (The plus side is that this CVE has existed for years.)

What CISA Informed​

CISA informs us about the ASUS Live Update CVE via their Known Vulnerabilities list. And they has strongly urged affected users to update their devices to prevent the issue. Good news is that the CVE was found by professionals years before CISA made this announcement. Hence, most users will be safe if they’re using new ASUS laptops with warranties or have updated.

Why Is This Important?​

Even though the flaw is old, if you have an old/unpatched system, these users are still susceptible. If you did not update your ASUS device, you may currently have an exploitable system due to this CVE.

Key Points to Know About this CVE:

• It affects the ASUS Live Update software.
• A hacker can execute malicious code from anywhere on that target system.
• Only old/unpatched versions of ASUS Live Update are subject to this CVE.

So if you haven’t done so already, patch your device immediately!

What You Need To Do​

In order to keep your ASUS laptop safe, please do the following:

• Keep your Live Update software updated.
• Execute a full system scan.
• Do not click on any email or download that seems to be suspicious.

These simple steps will help to maximize the security of your laptop!

Most newer systems should be fine now. Make sure you always update your system frequently, so that this type of issue does not occur in the future!