An important Asus Windows tool has a worrying security error – here is how you can stay safe

• ASUS has released a patch for CVE-2025-3464, a very serious authentication bypass error
• The problem affects Armory Crate, a centralized hub for managing Asus and Rog -hardware
• The error may lead to a complete takeover of the device

ASUS says that it has established a vulnerability with a high seriousness that could have enabled threat factors to bypass authentication requirements and obtain system rights on a Windows device.

Recently a Cisco Talos security researcher discovered that an arsenal Krat Kernel-Mode driver is not dependent on the correct checks at the OS level, but instead request authenticating with the help of a hardcode SA-256 hash from Asuscertservices.exe and a PID permit.