CVE-2025-2492 CRITICAL

CVE-2025-2492

Vendor Asus
Product Router
Weakness CWE-288
Published April 18, 2025
Last update February 24, 2026

CVSS base score

9.2/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality
Integrity

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N

What the vulnerability does

01Description

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

Key dates

02Disclosure timeline

April 18, 2025 CVE published
February 24, 2026 Record updated