ASUS has issued an urgent notice asking users to update Armoury Crate, the central management software on ASUS devices, to patch the extremely serious CVE-2025-3464 vulnerability. Without the update, hackers could take control of an entire Windows system.
Details of the CVE-2025-3464 Vulnerability
The flaw affects Armoury Crate versions V5.9.9.0 through V6.1.18.0 and sits in the AsIO3.sys driver. It is a "race condition" bug combined with an authentication bypass, which lets an attacker escalate privileges to the SYSTEM level, the highest on Windows. By using a hard link technique along with SHA-256 + PID authentication, hackers can get past the protection mechanisms and run malicious code directly on the device.
https://www.youtube.com/watch?v=dJSCKpCZzME
Asus has quickly released a patch and recommends that users update Armoury Crate right away to avoid exploitation, especially on computers running with unsafe administrator rights or without properly assigned permissions.
Security Improvements and New Features in the Armoury Crate Update
Besides fixing the CVE-2025-3464 vulnerability, the new Armoury Crate update also:
- Improves detection of new devices
- Fixes incorrect product images being displayed
- Fixes installation errors with user accounts that lack admin rights
- Improves the performance of service connections and updates
- Adds a new AI Overclocking option for motherboards
- Refines the UI experience in Aura Creator and the light/dark interface
- Strengthens service connections and handles login errors related to WebView2
The software also continues to support its standout features, such as Aura Sync, Aura Creator, Scenario Profiles, Game Library, Game Deals, and the ROG Elite Rewards points system.
However, users should note that Armoury Crate is only compatible with ASUS, ROG, and TUF hardware and does not support brands such as MSI or Gigabyte. If you are using hardware from another manufacturer, you should switch to alternatives such as MSI Center, Gigabyte Control Center, Signal RGB, or FanControl.
You can download it here: Download
In short: If you use an ASUS device, update Armoury Crate right away to avoid serious security risks. This is not only a fix for a dangerous vulnerability but also brings several important improvements to performance and security.
