PT-2025-20479 · Asus · Asus Driverhub

Leonjza + 1 · Published 2025-04-09 · Updated 2026-02-10 · CVE-2025-3463

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ASUS DriverHub versions prior to 1.0.6.0

Description An insufficient validation issue exists in ASUS DriverHub. This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints. The issue may allow untrusted sources to affect system behavior through crafted HTTP requests. The root cause is related to errors in the certificate authentication process. Exploitation of this issue can lead to a denial of service.

Recommendations Update ASUS DriverHub to version 1.0.6.0 or later.

Fix

RCE

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-09520

CVE-2025-3463

Affected Products

Asus Driverhub

References · 33

• https://bdu.fstec.ru/vul/2025-09520 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-3463 · Security Note
• https://asus.com/content/asus-product-security-advisory · Vendor Advisory
• https://reddit.com/r/pcmasterrace/comments/1mdj8d9/tool_release_cerulean_reaper_a_powershellbased · Reddit Post
• https://t.me/poxek/5898 · Telegram Post
• https://twitter.com/TuringCyberObs/status/1922221746590974430 · Twitter Post
• https://zoom.cnews.ru/soft/news/top/2025-05-12_firmennoe_po_gigantskogo · Note
• https://twitter.com/cybercronai/status/1920877779421163831 · Twitter Post
• https://securitylab.ru/news/559227.php · Note
• https://vuldb.com/?id.308119 · Note
• https://t.me/true_secator/7024 · Telegram Post
• https://t.me/cvenotify/121680 · Telegram Post
• https://mrbruh.com/asusdriverhub · Note
• https://twitter.com/Huntio/status/1924481344731525632 · Twitter Post
• https://t.me/thehackernews/6817 · Telegram Post