CVE-2025-59367CWE-288CWE-306

CVE-2025-59367

Critical · published November 13, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
57.9
In the wild
Unconfirmed
What it is

🔥 A gaping hole in certain DSL series routers lets attackers waltz right in without a password! Think of your router as a front door with a faulty lock that anyone can open just by pushing. It’s like inviting unwanted guests to your housewarming party without even realizing it! This vulnerability is absolutely devastating: an unauthorized user could gain full access to your network, potentially snooping on your data, changing settings, or even launching attacks against other devices. Your privacy and security are at stake, making this a critical issue that shouldn’t be ignored!

Put simply

Think of your router as a front door with a faulty lock that anyone can open just by pushing. It’s like inviting unwanted guests to your housewarming party without even realizing it! This authentication bypass flaw allows remote attackers to access the affected DSL routers without proper credentials, effectively circumventing the security measures intended to protect your network.

What to do

This vulnerability is absolutely devastating: an unauthorized user could gain full access to your network, potentially snooping on your data, changing settings, or even launching attacks against other devices. Your privacy and security are at stake, making this a critical issue that shouldn’t be ignored! To safeguard your system, update your router's firmware immediately to the latest version as specified in the ASUS Security Advisory. It’s also a good idea to review your router’s settings and change any default credentials. Don’t leave your door open! You’ve got this! With these steps, you’ll be back on track and your network will be secure in no time! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00855 · 57.9th percentile
Weaknesses
CWE-288 · Authentication Bypass Using an Alternate Path or Channel; CWE-306 · Missing Authentication for Critical Function
Published
2025-11-13T08:16Z
Affected products (3)
ProductVersionsFixed in
asus/dsl-ac51_firmware< 1.1.2.3_10101.1.2.3_1010
asus/dsl-n16_firmware< 1.1.2.3_10101.1.2.3_1010
asus/dsl-ac750_firmware< 1.1.2.3_10101.1.2.3_1010
References (2)
EPSS history
Timeline
  • 13 NOV 02:09Z
    An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the…
    cvelistv5