Vulnerabilitycritical
New ASUS firmware patches critical AiCloud vulnerability
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-41345+1 related CVE | ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module | 8.8 | 1% | ||
| CVE-2024-12912 | An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution | 7.2 | 1% | ||
| CVE-2025-12003 | WebDAV: Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information | 8.2 | <1% | ||
| CVE-2025-2492 | An improper authentication control vulnerability exists in AiCloud | 9.2 | 1% | ||
| CVE-2025-59365 | A stack buffer overflow vulnerability has been identified in certain router models | 6.9 | <1% | ||
| CVE-2025-59366 | An authentication-bypass vulnerability exists in AiCloud | 9.2 | 16% | ||
| CVE-2025-59368 | Aicloud: An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of… | 6.0 | <1% | ||
CVE-2025-59370+1 related CVE | bwdpi: A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary commands, leading to the… | 7.5 group max | <1% | ||
| CVE-2025-59371 | IFTTT integration feature: A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This… | 7.5 | <1% | ||
| CVE-2025-59372 | certain router models: A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially… | 6.9 | <1% |
From the original article
1 min read at securityaffairs.comASUS released new firmware to address multiple vulnerabilities, including a critical authentication bypass flaw in routers with AiCloud enabled. ASUS has issued new firmware addressing nine security vulnerabilities, including a critical authentication bypass, tracked as CVE-2025-59366 (CVSS score of 9. 2), affecting routers with AiCloud enabled.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.