The ASUS + LG Nightmare Scenario

Video summary

An ASUS router authentication flaw could expose 25–35 million devices and let attackers turn vulnerable LG TVs into listening devices.

Security researcher Mr. Bruh found an authentication bypass in ASUS routers that can let an attacker on the local network add an SSH key and gain persistent control. By chaining that access with previously reported LG TV vulnerabilities, the team demonstrated remotely commanding an LG TV to record through its built-in microphone and send audio to a server. They estimate 25–35 million ASUS routers may be affected, particularly Wi-Fi 6 models dating from around 2018; ASUS has not published a complete affected-model list. The flaw stems from routers accepting a valid authentication token when an unknown device ID is paired with a blank secret. ASUS missed the 90-day disclosure window, and patches are rolling out unevenly. The video urges users to avoid pairing the ASUS app, keep router firmware updated, use local setup, and secure devices such as NAS units with strong credentials.

Chapters

1. 0:00The NIGHTMARE SCENARIO: ASUS routers could expose up to 35 million networks and connected LG TVs
2. 6:48The New Vulnerabilities: An unchecked NTP handler enabled telnet control on port 9999
3. 9:05ASUS Vulnerable Again: Mr. Brøt’s blank-ID exploit reveals Wi-Fi credentials and network devices
4. 9:30LIVE DEMO: Blank-ID access exposed the Wi-Fi password and LG TV at 192.168.50.165
5. 12:13THE LG TV HACK RETURNS: Router access enabled covert microphone recording and a fake update warning
6. 16:32ASUS' Issues: No full affected-model list and an estimated 25–30 million vulnerable routers
7. 17:51Summary of the Exploit: A blank-secret token bypass could chain router access into TV surveillance
8. 25:08Uses of the Exploit: NAS access, journalist surveillance, and tracking a phone’s presence at home
9. 27:02ASUS Proof of Concept: RT-AX1800S V2 Bypass Enables SSH Access
10. 32:51ASUS' Awful Responses: Full Fix Missed the September 26 Deadline
11. 35:38Conclusion: Keep Router Management Local and Secure NAS and CCTV Devices

What the full analysis includes

11 chapters · 51 key points · 11 section summaries · mind map

The remaining 48 key points, section summaries and mind map are in the full analysis. Analyze this video to see everything →

This video is 40 min. The Free plan analyzes videos up to 30 min; plans from Plus cover videos up to 2 hours.