important · Privilege — Management plane
An unauthenticated ASUS Control Center request can lead to a root shell and control of its managed fleet.
Affects
ASUS Control Center Enterprise, an on-premises system for centrally managing servers, PCs and workstations.
The request discloses an encryption key that composes with SSRF and embedded credentials to enable SSH on TCP/2222 and supply a root login.
Detail and 2 sources
The available advisory material does not identify a fixed version.