PT-2025-30245 · Asus · Myasus

Mrbruh · Published 2025-07-21 · Updated 2025-07-21 · CVE-2025-4569

Positive Technologies (AI Summary)

CVSS v4.0

7.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions MyASUS (affected versions not specified)

Description An insecure sensitive key storage issue was found in MyASUS, potentially allowing an unauthorized actor to obtain a token that could be used to communicate with certain services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-4569

Affected Products

Myasus

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-4569 · Security Note
• https://asus.com/content/asus-product-security-advisory · Vendor Advisory
• https://asus.com/content/security-advisory · Vendor Advisory
• https://twitter.com/CVEnew/status/1947211149180633108 · Twitter Post
• https://t.me/cvetracker/28315 · Telegram Post
• https://t.me/cvenotify/129655 · Telegram Post
• https://t.me/cvenotify/129662 · Telegram Post