ASUS patches a 9.2-rated security flaw in certain routers
The flaw stems from AiCloud, a personal cloud server feature
There’s no evidence of abuse yet, but users should be wary
ASUS has released a fix for a critical-severity vulnerability affecting routers with AiCloud enabled which could allow threat actors to execute functions on the exposed devices remotely and without authorization.
It is tracked as CVE-2025-2492, and was given a severity score of 9.2/10 (critical). It can be exploited via a custom-tailored request.
+ There are no comments
Add yours