VulnerabilityDeferred

CVE-2025-59372

A path traversal vulnerability has been identified in certain router models.

MEDIUM 6.9EPSS 0.60%

Does this matter?

Lower severity and a low EPSS score (0.60%). Track it; it rarely justifies an emergency change on its own.

Description

A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

CVSS 4.0: 6.9 MEDIUMCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.60% probability · 47th percentile
CISA KEV: Not listed
Weakness: CWE-22
Source: 54bf65a7-a193-42d2-b1ba-8e150d3c35e1

References

https://www.asus.com/security-advisory/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.