PT-2025-46772 · Asus · Asus Dsl Series Routers
Publicado
2025-11-13
·
Atualizado
2025-12-20
·
CVE-2025-59367
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
ASUS DSL Series Routers (affected versions not specified)
Description
An authentication bypass issue exists in ASUS DSL series routers. This flaw allows remote, unauthenticated attackers to gain unauthorized access to affected systems. Exploitation of this issue could lead to botnet infections and distributed denial-of-service (DDoS) attacks, potentially compromising networks and data. The vulnerability is tracked as CVE-2025-59367 and has a CVSS score of 9.3, indicating a critical severity. The vulnerability allows attackers to access devices with ease, without requiring valid credentials. Affected devices include models such as ASUS-DSL-AC51, ASUS-DSL-N16U, ASUS-DSL-N16P, and ASUS-DSL-AC750.
Recommendations
Update ASUS DSL router firmware to version 1.1.2.3 1010.
Exploit
Correção
DoS
Missing Authentication
Authentication Bypass Using an Alternate Path or Channel
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Asus Dsl Series Routers