CVE-2025-2492

9.2 criticalEPSS 1.1%

Critical (9.2). EPSS 1.1% chance of exploitation in the next 30 days.

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

Severity

CVSS 4.0

9.2 critical

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWE: CWE-288
Published: 2025-04-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.asus.com/content/asus-product-security-advisory/

Check your stack JSON