CVE Catalog

CVE-2025-59366

Critical
Published: Translated: NVD NIST

Summary

In AiCloud, an authentication-bypass vulnerability exists, triggered by an unintended side effect of the Samba functionality, potentially allowing execution of specific functions without proper authorization.

Risk Assessment

An attacker can access functions without authentication, potentially leading to unauthorized actions and security compromise.

Recommendation

Apply security updates provided by ASUS and review Samba configuration.

Original NVD description (English source)

An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentially leading to allow execution of specific functions without proper authorization. Refer to the Security Update for ASUS Router Firmware section on the ASUS Security Advisory for more information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS