Asus warns of critical security flaws in router software

Asus has identified two serious software vulnerabilities in its routers that could allow unauthorized access to a user's digital home.

The first flaw involves the upload of VPN configuration files. A specially crafted file can trick the router into interpreting text as commands, executing orders disguised as an innocent setup file. This vulnerability specifically affects users who configure VPN services directly on the router rather than using individual apps on mobile devices or computers.

The second vulnerability stems from leftover troubleshooting code that allows the activation of Telnet, an older remote control method, without standard security checks. This could grant an attacker administrative privileges. Asus notes that an attacker would first need to be logged in, and warns users against running scripts or tools provided by scammers.