CVE-2025-3462CWE-346

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may…

High · published May 9, 2025

CVSS v4.0
8.4
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP requests.

Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS v4.0
8.4 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:H
EPSS
0.00501 · 42.0th percentile
Weakness
CWE-346 · Origin Validation Error
Published
2025-05-09T05:36Z
EPSS history
Timeline
  • 09 MAY 05:36Z
    "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may…
    cvelistv5