CVE-2025-2492CWE-288

An improper authentication control vulnerability exists in AiCloud

Critical · published April 18, 2025

CVSS v4.0
9.2
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions.

Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS v4.0
9.2 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.01131 · 66.1th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-04-18T08:57Z
EPSS history
Timeline
  • 18 APR 08:57Z
    An improper authentication control vulnerability exists in AiCloud
    cvelistv5