Critical severity · published Nov 13, 2025
CVE-2025-59367
An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DF
Dsl-ac51 Firmware · Asus
before 1.1.2.3_1010 · source: NVD
DF
Dsl-ac750 Firmware · Asus
before 1.1.2.3_1010 · source: NVD
DF
Dsl-n16 Firmware · Asus
before 1.1.2.3_1010 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-59367
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-59367
Vendor Advisory
https://www.asus.com/security-advisory
More from Dsl-ac51 Firmware
9.8
CVE-2017-14698
ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1, DSL-N12E C1, DSL-N14U, DSL-N14U-B1, DSL-N16, DSL-N16U, DSL-N17U, DSL-N66U, and…
6.5
CVE-2017-14699
Multiple XML external entity (XXE) vulnerabilities in the AiCloud feature on ASUS DSL-AC51, DSL-AC52U, DSL-AC55U, DSL-N55U C1, DSL-N55U D1, DSL-AC56U, DSL-N10_C1, DSL-N12U C1,…