ASUS Armoury Crate bug lets attackers get Windows admin privileges
On Windows computers, a high-severity flaw in the ASUS Armoury Crate program can enable threat actors to elevate their privileges to SYSTEM level.
With a severity rating of 8.8 out of 10, the security flaw is identified as CVE-2025-3464. It impacts the Armoury Crate system management software's AsIO3.sys and could be used to get around authorization.
The official ASUS system control program for Windows is called Armoury Crate. It offers a centralized interface for managing ASUS peripherals and performance settings, adjusting fan curves, controlling RGB lighting (Aura Sync), and downloading drivers and firmware updates. The software package employs the kernel driver to access and control hardware capabilities in order to carry out all of these tasks and offer low-level system monitor...