CVE-2025-4569CWE-798

An insecure sensitive key storage issue was found in MyASUS

High · published July 21, 2025

CVSS v4.0
7.7
EPSS
0%
Percentile
34.8
In the wild
Unconfirmed
What it is

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services.

Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information.

The record
Technical detail
CVSS v4.0
7.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00416 · 34.8th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2025-07-21T07:51Z
EPSS history
Timeline
  • 21 JUL 07:51Z
    An insecure sensitive key storage issue was found in MyASUS
    cvelistv5