by Kastro
Paper/Archive/CVE-2025-59366

CVE-2025-59366

ASUS Router — An authentication-bypass vulnerability exists in AiCloud.

EPSS 12%CVSS 9.2
critical.is priorityof 100
47
CVSS 9.2 (CNA)9.2 / 10 × 3027.6Not in CISA KEV+300.0EPSS percentile 96.2.962 × 2019.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.

Affected

ProductAffectedFixed inSource
Router3.0.0.4_386–CNA
Router3.0.0.4_388–CNA
Router3.0.0.6_102–CNA

Scores by source

ASUS (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisoryasus.com/content/security-advisory