Integer Underflow Vulnerability in Aicloud by ASUS
CVE-2025-59368

6MEDIUM

Key Information:

Vendor

Asus
Status
Router
Vendor
CVE Published:
25 November 2025

What is CVE-2025-59368?

An integer underflow vulnerability has been detected in the Aicloud service offered by ASUS. This flaw can be exploited by authenticated attackers who send specially crafted requests, potentially leading to unavailability issues of the device. Proper measures and prompt updates as outlined in ASUS's Security Advisory are crucial to mitigate risks associated with this vulnerability.

Affected Version(s)

Router 3.0.0.4_386

Router 3.0.0.4_388

Router 3.0.0.6_102

References

https://www.asus.com/security-advisory/
vendor-advisory

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.