PT-2025-1262 · Asus · Asus Router Aicloud

Published 2025-01-02 · Updated 2025-04-17 · CVE-2024-13062

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASUS Router AiCloud (affected versions not specified)

Description An unintended entry point vulnerability has been identified in certain router models, which may allow for arbitrary command execution. The vulnerability is related to the lack of data cleaning measures at the management level. This issue may be exploited by a remote attacker to execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Hidden Functionality

Command Injection

Weakness Enumeration

CWE-912

CWE-77

Related Identifiers

BDU:2025-00705

CVE-2024-13062

Affected Products

Asus Router Aicloud

References · 23

• https://bdu.fstec.ru/vul/2025-00705 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-13062 · Security Note
• https://t.me/pentestingnews/54836 · Telegram Post
• https://twitter.com/Dinosn/status/1875042104088633508 · Twitter Post
• https://avd.aquasec.com/nvd/2024/cve-2024-13062 · Note
• https://twitter.com/the_yellow_fall/status/1874996338250887293 · Twitter Post
• https://twitter.com/zoomeye_team/status/1875016481886589220 · Twitter Post
• https://t.me/cvedetector/14113 · Telegram Post
• https://twitter.com/fridaysecurity/status/1874997691417334095 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1876548170898969066 · Twitter Post
• https://twitter.com/CVEnew/status/1874750100964016389 · Twitter Post
• https://twitter.com/cracbot/status/1876146732117213604 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1874803582853111920 · Twitter Post
• https://asus.com/content/asus-product-security-advisory · Note
• https://twitter.com/Komodosec/status/1875257334655807995 · Twitter Post