VULNERABILITY INTELLIGENCE
CVE-2025-59367
CVSS score9.3 CRITICAL
EPSS probability0.85%
CISA KEVNot currently listed
Published2025-11-13
Last modified2026-10-18
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information.
Weakness classification
- CWE-288: Authentication Bypass Using an Alternate Path or Channel
- CWE-306: Missing Authentication for Critical Function
Primary references
- 54bf65a7-a193-42d2-b1ba-8e150d3c35e1 — Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Vendor Advisory