ASUS

Security incidents tagged ASUS. Newest first.

1 ASUS incident in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore

Show 3 older incidents

Dec 17CriticalASUS Live Update: Live Update Embedded Malicious Code VulnerabilityPatched
ASUS Live Update Patched
ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-12-17.
Open incident →CVE-2025-59374

Jun 2CriticalASUS Routers: Routers Improper Authentication VulnerabilityPatched
ASUS Routers Patched
ASUS Lyra Mini and ASUS GT-AC2900 devices contain an improper authentication vulnerability that allows an attacker to gain unauthorized access to the administrative interface. The impacted products could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization. Added to CISA KEV on 2025-06-02.
Open incident →CVE-2021-32030
Jun 2HighASUS RT-AX55 Routers: RT-AX55 Routers OS Command Injection VulnerabilityPatched
ASUS RT-AX55 Routers Patched
ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346. Added to CISA KEV on 2025-06-02.
Open incident →CVE-2023-39780