CVE-2025-2492
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2025
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Router
- Vendor
- ASUS
- Product
- Router
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.0.0.4_382 series | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.0.0.4_386 series | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.0.0.4_388 series | affected | Unavailable | Unavailable | Unavailable | None listed |
| 3.0.0.6_102 series | affected | Unavailable | Unavailable | Unavailable | None listed |