Loading story…
ASUS has disclosed a critical authentication bypass vulnerability, tracked as CVE-2025-59367, affecting several of its DSL series router models, including DSL-AC51, DSL-N16, and DSL-AC750. This flaw allows remote, unauthenticated attackers to gain unauthorized access to unpatched devices exposed to the internet, with attacks requiring low complexity and no user interaction. ASUS has released firmware version 1.1.2.3_1010 to address the issue and strongly urges users to update their devices immediately. For users unable to update, ASUS recommends disabling all internet-accessible services such as remote WAN access, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP, as well as following best practices like using complex passwords and regularly checking for firmware updates.
The vulnerability has been assigned a critical CVSS score of 9.3, highlighting the significant risk it poses to affected devices. While there are currently no reports of active exploitation, the nature of the flaw makes it a prime target for attackers seeking to compromise routers for use in botnets or DDoS attacks. Users of end-of-life models that will not receive firmware updates are especially urged to implement the recommended mitigations to reduce their exposure to potential attacks.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
ASUS publicly warned users about the critical authentication bypass issue in its DSL series routers, drawing attention to the risk of remote compromise. Security reporting on November 14 amplified the vendor warning and the severity of the vulnerability.
A critical authentication bypass vulnerability, tracked as CVE-2025-59367, was publicly disclosed affecting ASUS DSL series routers. The flaw could allow remote attackers to gain unauthorized access to vulnerable devices.
3 references tracked. Mallory keeps watching after this page renders.
bleepingcomputer.com
Open sourcesecurityaffairs.com
Open sourcecvefeed.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
ASUS released firmware updates to fix **CVE-2025-59367**, a critical vulnerability in DSL series routers caused by insufficient authentication controls. The flaw can be exploited remotely by an unauthenticated attacker to gain unauthorized system access, enabling full compromise of a device’s confidentiality, integrity, and availability. Affected devices include the **ASUS DSL-AC51**, **DSL-N16**, and **DSL-AC750** running firmware earlier than `1.1.2.3_1010`. ASUS urged customers to update immediately to firmware version `1.1.2.3_1010`; where patching is not possible, the company advised administrators not to expose management interfaces or internet-facing features including port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP.
Jul 24, 2026
ASUS has released new firmware updates to address nine security vulnerabilities in its routers, including a critical authentication bypass flaw identified as CVE-2025-59366. This vulnerability affects routers with the AiCloud feature enabled, which allows remote access and personal cloud functionality. The flaw, stemming from an unintended side effect of the Samba functionality, could allow remote attackers to execute specific functions without proper authorization by chaining path traversal and OS command injection weaknesses. ASUS strongly urges all users to update their router firmware immediately to mitigate these risks. For users with end-of-life ASUS router models that will not receive firmware updates, the company recommends disabling all internet-facing services such as AiCloud, WAN remote access, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP. Additionally, users are advised to use strong, unique passwords for both router login and WiFi to reduce exposure. The vulnerabilities have made outdated ASUS routers attractive targets for botnet campaigns, emphasizing the importance of prompt mitigation and firmware updates to protect against exploitation.
Jun 29, 2026
ASUS has released security advisories addressing several critical vulnerabilities affecting its routers and PC software. Notably, CVE-2025-59366 is an authentication bypass flaw in the AiCloud feature of ASUS routers, with a CVSS score of 9.4, allowing attackers to execute specific functions without proper authorization due to a Samba-related issue. Additionally, CVE-2025-12003 is a path traversal vulnerability in the WebDAV component of ASUS router firmware, enabling unauthenticated remote attackers to compromise device integrity. Another high-severity issue, CVE-2025-59373, impacts the ASUS System Control Interface Service used by the MyASUS application, allowing local privilege escalation to SYSTEM on Windows devices through a flawed file-restore mechanism. ASUS has provided patches for these vulnerabilities and urges users to update affected devices immediately. The vulnerabilities impact a wide range of ASUS products, including desktop PCs, laptops, NUC systems, All-in-One machines, and various router models. Attackers exploiting these flaws could gain unauthorized access, escalate privileges, or execute arbitrary code, posing significant risks to both home and enterprise environments. Users are advised to verify their device firmware and software versions and apply the latest security updates via Windows Update or the ASUS Support site to mitigate these threats.
Jun 29, 2026