{"id":"CVE-2025-59367","state":"PUBLISHED","title":"An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to ","description":"An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information.","publishedAt":"2025-11-13T02:09:55.309Z","updatedAt":"2026-02-26T16:57:07.823Z","severity":{"score":9.3,"label":"Critical","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"ASUS"},"assigner":"ASUS","products":["ASUS DSL-AC51","ASUS DSL-N16","ASUS DSL-AC750"],"affected":[{"vendor":"ASUS","product":"DSL-AC51","defaultStatus":"unaffected","versions":[{"version":"Before 1.1.2.3_1010","status":"affected"}]},{"vendor":"ASUS","product":"DSL-N16","defaultStatus":"unaffected","versions":[{"version":"Before 1.1.2.3_1010","status":"affected"}]},{"vendor":"ASUS","product":"DSL-AC750","defaultStatus":"unaffected","versions":[{"version":"Before 1.1.2.3_1010","status":"affected"}]}],"references":["https://www.asus.com/security-advisory"],"weaknesses":["CWE-288"],"ingestedAt":"2026-10-29T20:09:39.787Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/59xxx/CVE-2025-59367.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2025-59367","state":"PUBLISHED","datePublished":"2025-11-13T02:09:55.309Z","dateUpdated":"2026-02-26T16:57:07.823Z","assignerShortName":"ASUS","assignerOrgId":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","dateReserved":"2025-09-15T01:36:47.357Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information."}],"affected":[{"vendor":"ASUS","product":"DSL-AC51","defaultStatus":"unaffected","versions":[{"version":"Before 1.1.2.3_1010","status":"affected"}]},{"vendor":"ASUS","product":"DSL-N16","defaultStatus":"unaffected","versions":[{"version":"Before 1.1.2.3_1010","status":"affected"}]},{"vendor":"ASUS","product":"DSL-AC750","defaultStatus":"unaffected","versions":[{"version":"Before 1.1.2.3_1010","status":"affected"}]}],"references":[{"url":"https://www.asus.com/security-advisory","tags":["vendor-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":9.3,"baseSeverity":"CRITICAL","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-288","description":"CWE-288: Authentication Bypass by Alternate Path or Channel","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"ASUS","orgId":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","dateUpdated":"2025-11-13T02:09:55.309Z"},"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","references":[{"url":"https://www.asus.com/security-advisory","tags":["exploit"]}],"metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2025-59367","role":"CISA Coordinator","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2025-11-14T04:55:37.458221Z"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-02-26T16:57:07.823Z"}}]}}}