CVE-2025-12003CWE-22CWE-306path-traversal

CVE-2025-12003

published November 25, 2025

CVSS
8.2
EPSS
1%
Percentile
50.4
In the wild
Unconfirmed
What it is

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device.

Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS
8.2 · NONE
CVSS v4.0
Not supplied
EPSS
0.00647 · 50.4th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-306 · Missing Authentication for Critical Function
Published
2025-11-25T13:15Z
References (1)
https://www.asus.com/security-advisory/ · 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
EPSS history
Timeline
  • 25 NOV 07:28Z
    A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device
    cvelistv5