PT-2025-1000 · Asus · Icloud

Published

2025-01-02

·

Updated

2025-11-27

·

CVE-2024-12912

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ASUS AiCloud (affected versions not specified)
Description An improper input insertion issue exists in AiCloud on certain ASUS router models. This can allow a remote attacker to execute arbitrary commands. The issue involves a failure to properly sanitize data at the management level. Multiple reports indicate a potential link to ongoing investigations and possible exploitation in the wild. The vulnerability is documented in the '01/02/2025 ASUS Router AiCloud vulnerability' section of the ASUS Security Advisory. No information is available regarding the number of potentially affected devices.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Command Injection

Weakness Enumeration

CWE-20CWE-77

Related Identifiers

BDU:2025-00029
CVE-2024-12912

Affected Products

Icloud