“I asked ASUS if they offered bug bounties. They responded saying they do not, but they would instead put my name in their “hall of fame”.”
ASUS’s BIOS installs DriverHub, which took commands from any website whose name contained driverhub.asus.com. One page visit ran code as admin. ASUS paid nothing, credited only an earlier reporter, and claimed laptops were unaffected. Any machine with DriverHub is affected.