ASUS vulnerabilities
190 CVEs and advisories name ASUS as an affected vendor, 2 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2025-13348An improper access control vulnerability exists in ASUS Secure Delete Driver of ASUS Business Manager.
- CVE-2025-12793An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent.
- CVE-2025-59374"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced thro
- CVE-2025-11775An out-of-bounds read vulnerability has been identified in the asComSvc service.
- CVE-2025-11901An uncontrolled resource consumption vulnerability affects certain ASUS motherboards using Intel B460, B560, B660, B760, H410, H510, H610,
- CVE-2025-59372A path traversal vulnerability has been identified in certain router models.
- CVE-2025-59371An authentication bypass vulnerability has been identified in the IFTTT integration feature.
- CVE-2025-59370A command injection vulnerability has been identified in bwdpi.
- CVE-2025-59369A SQL injection vulnerability has been identified in bwdpi.
- CVE-2025-59368An integer underflow vulnerability has been identified in Aicloud.
- CVE-2025-12003A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of th
- CVE-2025-59365A stack buffer overflow vulnerability has been identified in certain router models.
- CVE-2025-59366An authentication-bypass vulnerability exists in AiCloud.
- CVE-2025-59373A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface.
- CVE-2025-59367An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized ac
- CVE-2025-9338A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver.
- CVE-2025-9337A null pointer dereference has been identified in the AsIO3.sys driver.
- CVE-2025-9336A stack buffer overflow has been identified in the AsIO3.sys driver.
- CVE-2025-9968A link following vulnerability exists in the UnifyScanner component of Armoury Crate.
- CVE-2025-6398A null pointer dereference vulnerability exists in the IOMap64.sys driver of ASUS AI Suite 3.
- CVE-2025-4570An insecure sensitive key storage issue was found in MyASUS.
- CVE-2025-4569An insecure sensitive key storage issue was found in MyASUS.
- CVE-2025-3464A race condition vulnerability exists in Armoury Crate.
- CVE-2025-1533A stack buffer overflow has been identified in the AsIO3.sys driver.
- CVE-2025-3463"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulne
- CVE-2025-3462"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in AS
- CVE-2025-2492An improper authentication control vulnerability exists in AiCloud.
- CVE-2025-2027A double free vulnerability has been identified in the ASUS System Analysis service.
- CVE-2025-1354A cross-site scripting (XSS) vulnerability in the RT-N10E/ RT-N12E 2.0.0.x firmware .
- CVE-2024-12957A file handling command vulnerability in certain versions of Armoury Crate may result in arbitrary file deletion.