> Asus appears to be one of the worst OEMs we looked at, providing attackers with functionality that can only be referred to as remote code execution as a service.

Ouch.

Yes, this was one of the 9+ vulns they found.