VULNERABILITY INTELLIGENCE

CVE-2025-15101

CVSS score8.8 HIGH
EPSS probability0.92%
CISA KEVNot currently listed
Published2026-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commands via a crafted parameter. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Weakness classification

  • 54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-78

Primary references