PT-2025-30246 · Asus · Myasus

Febin Mon Saji + 3 · Published 2025-07-21 · Updated 2025-07-21 · CVE-2025-4570

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions MyASUS (affected versions not specified)

Description An issue involving insecure storage of sensitive keys was identified in MyASUS. This could potentially allow an unauthorized actor to obtain a token used for communication with certain services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2025-4570

Affected Products

Myasus

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-4570 · Security Note
• https://asus.com/content/asus-product-security-advisory · Vendor Advisory
• https://asus.com/content/security-advisory · Vendor Advisory
• https://t.me/cvetracker/28316 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1947225695601471885 · Twitter Post
• https://t.me/cvenotify/129656 · Telegram Post
• https://twitter.com/CVEnew/status/1947211148316627411 · Twitter Post
• https://t.me/cvenotify/129663 · Telegram Post