AURA SYNC 1.07.22 - Report Issues Here

[MasterC]

To better understand which issues you are currently experiencing with the latest release, I will be collecting your feedback from this thread to let the team know. Thanks!

If you are not on the latest version, update to 1.07.22 to make debugging faster, please remember to mention:
1. The BIOS/firmware version for your hardware.
2. The AURA SYNC products you own and any other 3rd-party lighting software.
3. If a power cycle has made any difference. (Shutdown, power off, unplug power cable for a minute)
4. If you have tried reinstalling Aura or Windows already.
5. Do you have Aura for Graphics Cards installed also. (Please uninstall)
6. OS build/version.
7. If the issue was present in the previous version(s).
Please Include a screenshot of the Aura UI, and any other pictures if applicable.


Download 1.07.22 here:
https://www.asus.com/campaign/aura/au/download.html

If you experienced installation issues previously, please follow the procedure below:
- Make sure you have updated the firmware for your keyboard & mouse using Armoury.
- Right-click on Setup (not AsusSetup), then Run as administrator to uninstall the old version and remove all cached data.
- Reboot PC.
- Right-click on Setup, Run as administrator to install 1.07.22.
- Reboot PC.
- Right-click on the Aura shortcut icon, Run as administrator to open the Aura application.
- If devices are not showing in the Aura UI, hit the refresh icon.

[Abaidor]

SaLSouL wrote:
Source of the report https://www.guru3d.com/news-story/asus-aura-sync-and-gigabyte-xtreme-software-contain-vulnerabilitie...


Details:

A security company called SecureAuth shares word that that two drivers from Asus and also two from Gigabyte contain vulnerabilities. The drivers come bundled with tools that companies provide for motherboards and video cards.In total, there are seven vulnerabilities affecting five software products, and researchers wrote exploit code for each of them. Many of them might still be unaddressed. Two of the vulnerable drivers are installed by the Aura Sync software (v1.07.22 and earlier) from ASUS and the flaws they carry can be exploited for local code execution reports tweakers.net via bleeping computer:The vulnerabilities lead to privilege escalation via software like the GIGABYTE App Center (v1.05.21 and below), AORUS Graphics Engine (v1.33 and below), the XTREME Engine utility (v1.25 and earlier), and OC Guru II (v2.08). The vulnerabilities are tagged under CVE-2018-18535, CVE-2018-18536 and CVE-2018-1853. The first and last allow the execution of code with elevated rights, the second can lead to the reading and writing of data via the I/O ports.ASUS has been informed in November last year. In April, Asus released a new version of Aura Sync, but it only fixed two of the three problems, according to SecureAuth.Vulnerable PackagesASUS Aura Sync v1.07.22 and previous versions

What does Asus recommend we do @raja @MasterC

-regards

Sal

This is important and needs to be addressed..Please Asus respond!

[MoKiChU]

Abaidor wrote:
This is important and needs to be addressed..Please Asus respond!

Concretely, if no one physically accesses your PC, you do not risk anything at all :

Impact : Code execution
Remotely Exploitable : No
Locally Exploitable : Yes

https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities

[Abaidor]

MoKiChU wrote:
Concretely, if no one physically accesses your PC, you do not risk anything at all :



https://www.secureauth.com/labs/advisories/asus-drivers-elevation-privilege-vulnerabilities

Then there is no problem...thanks for the heads up...

[richac]

SaLSouL wrote:
Source of the report https://www.guru3d.com/news-story/asus-aura-sync-and-gigabyte-xtreme-software-contain-vulnerabilitie...


Details:

A security company called SecureAuth shares word that that two drivers from Asus and also two from Gigabyte contain vulnerabilities. The drivers come bundled with tools that companies provide for motherboards and video cards.In total, there are seven vulnerabilities affecting five software products, and researchers wrote exploit code for each of them. Many of them might still be unaddressed. Two of the vulnerable drivers are installed by the Aura Sync software (v1.07.22 and earlier) from ASUS and the flaws they carry can be exploited for local code execution reports tweakers.net via bleeping computer:The vulnerabilities lead to privilege escalation via software like the GIGABYTE App Center (v1.05.21 and below), AORUS Graphics Engine (v1.33 and below), the XTREME Engine utility (v1.25 and earlier), and OC Guru II (v2.08). The vulnerabilities are tagged under CVE-2018-18535, CVE-2018-18536 and CVE-2018-1853. The first and last allow the execution of code with elevated rights, the second can lead to the reading and writing of data via the I/O ports.ASUS has been informed in November last year. In April, Asus released a new version of Aura Sync, but it only fixed two of the three problems, according to SecureAuth.Vulnerable PackagesASUS Aura Sync v1.07.22 and previous versions

What does Asus recommend we do @raja @MasterC

-regards

Sal

I had a feeling lol.

[SaLSouL]

So 1.07.22.1 (beta) Aura - No devices recognised Crosshair VI Extreme bios 6301 as still waiting for AGESA 1.0.0.6 BIOS 6401.............
1.07.22 Aura No devices recognised ^^
1.06.95 Aura Works as intended

[IainM]

AURA isn't even installing. It gets to 94% then stops. Although the icon is there, it fails to start. Can't find Qt platform plugin windows.

Fresh install of Win10 64bit on Z370F with 8600K. Not sure about the BIOS version. Win 10 1803 17134.472

[MaacK]

Here's an issue: ITS FREAKING BROKE LIKE ALL OF YOUR OTHER SOFTWARE

[DimitriSafarika]

I bought my computer (with mostly ASUS Aura compatible parts) more than a year ago.
I tried countless versions, re-installs, workarounds ... I had given up and was letting all the LED's go on randomly without any software.

Until today... when I decided to give it one last try !

FINALLY, version 1.07.22 IS working, no freezing, no HUGE CPU load (3-4%, could be better but hey, at least, it works !)

Merry Christmas and Happy new year to all 🙂

[JonnyB1989]

I have a Zenith Extreme running on Bios 1601, LED EC1 Version: AUMA0-E6K5-0105 and LED EC2 Version: AULA0-S072-021.
The Zenith Extreme, G. Skill Tridendz RGB are the aura enabled parts i own. Corsair iCue is insalled to control my Keyboard.
Powercycling did nothing.
Reinstalling AURA version 1.06.29-1.07.22 made no diffrence, ALL THOSE VERSIONS DIDN`T DETECT ANY KIND OF RGB COMPONETS.
Sevral builds of Windows 10 1803 and 1809 made no diffrence and i don´t reinstall windows for a sh**ty programmed rgb software.
The working versions of aura were until 1.06.17

How about a better uninstall routine? The actual one leaves a big mess in the windows registry and on the windowsdrive, the aura cleaner did nothing.
Searching the windows registry for "AURA", hiting F3 for over an hour and deleting evrything that was conected to AURA and its Lighting Service.
Made a big diffrence now version 1.07.22 works just fine.

Thanks Asus for f***ing up evryones windows install, with your carelessnes. -.-

[rexbinary]

Hi all,

I have a Z390-H mobo and AURA SYNC doesn't detect the mobo lighting, but I'm not 100% sure it should. In the UEFI BIOS it has controls there for AURA lighting on the mobo. AURA SYNC does detect my STRIX 1080 Ti, and my Trident Z RGB memory which I can control just fine.

1. The BIOS/firmware version for your hardware.
1002

2. The AURA SYNC products you own and any other 3rd-party lighting software.
Z390-H, STRIX 1080 Ti, Trident Z RGB Memory

3. If a power cycle has made any difference. (Shutdown, power off, unplug power cable for a minute)
No difference.

4. If you have tried reinstalling Aura or Windows already.
No to both.

5. Do you have Aura for Graphics Cards installed also. (Please uninstall)
No

6. OS build/version.
Win 10 Pro 1809 17763.195 64-bit

7. If the issue was present in the previous version(s).
Not sure. 1.07.22 is the first version I have ever installed.

Thanks!