CVE-2025-59366_CVE-2025-59366

9.2 / 10

CRITICAL

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization.

Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.

AI Analysis

Authentication-bypass vulnerability in AiCloud due to unintended side effect of Samba functionality

Basic Information

ID CVE-2025-59366

Source ASUS

Published Nov 25, 2025 at 07:27

Affected Product

Vendor ASUS

Product Router

Version 3.0.0.4_386

Affected Versions ASUS Router 3.0.0.4_386
ASUS Router 3.0.0.4_388
ASUS Router 3.0.0.6_102

CWE Classification

CWE-22 CWE-78

AI Assessment

AI Score 9.2 / 10

AI Severity Critical

Vendor ASUS

Product ASUS Router

Version 3.0.0.4_386, 3.0.0.4_388, 3.0.0.6_102

References

www.asus.com /content/security-advisory/

{
    "lastseen": "",
    "description": "An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization.\n\n\nRefer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.",
    "published": "2025-11-25T07:27:02.626Z",
    "modified": "2025-11-25T07:27:02.626Z",
    "type": "cve",
    "title": "CVE-2025-59366",
    "source": "ASUS",
    "references": "https://www.asus.com/content/security-advisory/",
    "id": "CVE-2025-59366",
    "bulletinFamily": "",
    "cwe": [
        "CWE-22",
        "CWE-78"
    ],
    "cvelist": null,
    "sourceData": "ASUS Router 3.0.0.4_386\nASUS Router 3.0.0.4_388\nASUS Router 3.0.0.6_102",
    "sourceHref": "",
    "cvss": {
        "score": 9.2,
        "severity": "CRITICAL",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Router",
    "version": "3.0.0.4_386",
    "vendor": "ASUS",
    "ai_description": "Authentication-bypass vulnerability in AiCloud due to unintended side effect of Samba functionality",
    "ai_severity": "Critical",
    "ai_vendor": "ASUS",
    "ai_product": "ASUS Router",
    "ai_version": "3.0.0.4_386, 3.0.0.4_388, 3.0.0.6_102",
    "ai_score": 9.2
}