Latest ASUS AiCloud router vulnerability: CVE-2025-2492 #
ASUS has disclosed a vulnerability in several of its router models using its "AiCloud" functionality. Designated as CVE-2025-2492, this vulnerability allows an attacker to bypass authentication mechanisms on the router. Successfully exploiting this vulnerability would allow an attacker to alter the configuration of the router and potentially execute arbitrary code. This vulnerability is considered highly critical with a CVSS score of 9.2.
What is the impact? #
Successful exploitation of these vulnerabilities would allow an attacker to take control of the vulnerable devices. As these devices are generally located at the network edge, they are often exposed to the public internet.
Are updates or workarounds available? #
ASUS has released updated firmware for the affected devices. Users are urged to update as quickly as possible. Users are also encouraged to to disable the "AiCloud" feature of their routers until the latest firmware patch has been applied.
How do I find potentially vulnerable systems with runZero? #
From the Assets Inventory, use the following query to locate systems running potentially vulnerable systems:
os:="Asus AsusWRT 382" OR os:="Asus AsusWRT 386" OR os:="Asus AsusWRT 388" OR os:="Asus AsusWRT 102"
