Microsoft teams up with ASUS to launch ROG Xbox Ally and compete with Steam Deck

The competition in the segment of consolidated PCs is intensifying, with companies like ASUS, Lenovo, and MSI eager to gain ground, although most sales still belong to the Steam Deck. As consumer interest grows, Microsoft has decided to join this fight by collaborating with ASUS to develop the ROG Xbox Ally, which is set to launch in October, although the price remains a mystery. The innovative Xbox Mode One of the standout features of the ROG Xbox Ally is its innovative ‘Xbox Mode’, which customizes Windows 11 in order to simplify the […]

The competition in the consolidated PC segment is intensifying, with companies like ASUS, Lenovo, and MSI eager to gain ground, although most sales still belong to the Steam Deck. As consumer interest grows, Microsoft has decided to join this fight by collaborating with ASUS to develop the ROG Xbox Ally, which is set to launch in October, although the price remains a mystery.

The innovative Xbox Mode

One of the most notable features of the ROG Xbox Ally is its innovative ‘Xbox Mode’, which customizes Windows 11 to simplify the gaming experience, avoiding the conventional desktop. This mode aims to provide a more optimized environment for video games, allowing players to focus on what really matters: the game.

Interestingly, this ‘Xbox Mode’ has been leaked and can be activated on various devices with Windows 11, such as the new Lenovo Legion Go 2, allowing more users to experience its benefits even before its official release. According to reports, the 25H2 update of Windows 11 hides a full-screen boot of the Xbox app that frees up 2 GB of RAM, alleviating some performance and battery life restrictions of the devices.

Initial tests indicate that games like Shadow of the Tomb Raider experience a notable increase in frames per second (FPS), going from 29 to 38 FPS on a ROG Ally, along with reduced RAM usage in full-screen mode compared to classic desktop. This could position Windows 11 as a serious competitor against SteamOS in the space of console-like PCs.

As more options arise, players have access to various game libraries from a single interface that includes Microsoft Store, Steam, and Battle.net, without losing the full functionality of Windows. This development reflects how large companies are evolving to meet the growing demand for more integrated and efficient gaming solutions.

These Asus routers need to be updated due to a critical vulnerability

According to recent news, a couple of Asus router users are at high risk as these devices carry important vulnerabilities

Several Asus routers have been identified as having critical vulnerabilities, with a Common Vulnerability Scoring System (CVSS) score of 9.8 for some. In contrast, others are rated as “high” severity with CVSS scores of 8.8.

Three remote code execution flaws with critical severity have been found in the ASUS RT-AX55, RT-AX56U_V2, and RT-AC86U routers. If security upgrades are not installed, these flaws might possibly provide threat actors access to the devices.

These routers are well-liked high-end devices that customers with high-performance requirements and gamers alike use. The vulnerabilities are linked to format string vulnerabilities and have a CVSS v3.1 score of 9.8 out of 10.0. These weaknesses can be exploited remotely and anonymously, allowing for arbitrary device actions, service interruptions, and remote code execution.

Asus router models that are at risk

According to Bleeping Computer, the three vulnerabilities that were disclosed earlier today are:

  • CVE-2023-39238: Lack of proper verification of the input format string on the iperf-related API module ‘ser_iperf3_svr.cgi’.
  • CVE-2023-39239: Lack of proper verification of the input format string in the API of the general setting function.
  • CVE-2023-39240: Lack of proper verification of the input format string on the iperf-related API module ‘ser_iperf3_cli.cgi’.

“The above issues impact ASUS RT-AX55, RT-AX56U_V2, and RT-AC86U in firmware versions 3.0.0.4.386_50460, 3.0.0.4.386_50460, and 3.0.0.4_386_51529 respectively,” BC added.

The Taiwan Computer Emergency Response Team/Coordination Center (TWCERT/CC) has disclosed eight vulnerabilities in these Asus routers. If successfully exploited, these vulnerabilities can allow attackers to carry out actions like command injection and remote code execution (RCE).

When user input inside the format string parameters of specific functions is not adequately verified or sanitized, format string vulnerabilities might arise. They may result in information leakage and code execution, among other security problems. In order to take advantage of these flaws, attackers usually send specially designed input to the susceptible devices, focusing on certain administrative API operations in the case of the ASUS routers.

How to protect yourself against hackers

The only thing you need to do is to update your Asus routers so that you will not be the target of hackers. Here are all the necessary links for you to update your router, published by Bleeping Computer:

The firmware updates for these routers were all rolled out in the current year, starting with the AX56U_V2 receiving its firmware update in May 2023, followed by the RT-AC86U in July 2023, and the RT-AX55 in August 2023.

If your router is affected, it’s crucial to check your current firmware version promptly. After confirming and, if necessary, updating it, it’s advisable to disable remote access to your router.