PT-2025-46772 · Asus · Asus Dsl Series Routers

Published

2025-11-13

·

Updated

2025-12-20

·

CVE-2025-59367

CVSS v3.1

9.8

Critical

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions ASUS DSL Series Routers (affected versions not specified)
Description An authentication bypass issue exists in ASUS DSL series routers. This flaw allows remote, unauthenticated attackers to gain unauthorized access to affected systems. Exploitation of this issue could lead to botnet infections and distributed denial-of-service (DDoS) attacks, potentially compromising networks and data. The vulnerability is tracked as CVE-2025-59367 and has a CVSS score of 9.3, indicating a critical severity. The vulnerability allows attackers to access devices with ease, without requiring valid credentials. Affected devices include models such as ASUS-DSL-AC51, ASUS-DSL-N16U, ASUS-DSL-N16P, and ASUS-DSL-AC750.
Recommendations Update ASUS DSL router firmware to version 1.1.2.3 1010.

Exploit

Fix

DoS

Missing Authentication

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-306CWE-288

Related Identifiers

BDU:2025-14646
CVE-2025-59367

Affected Products

Asus Dsl Series Routers