CVE-2025-12003
HighCVSS 8.2Exploitation Probability (EPSS)
Elevated risk50th percentile - higher than 50% of all known CVEs
Summary
A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Risk Assessment
An attacker may modify files or device configuration without authentication, potentially compromising system integrity.
Recommendation
Update the ASUS router firmware according to the ASUS Security Advisory.
Other vulnerabilities in WebDAV
See all- CVE-2026-96847High
An untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in the code that processes WebDAV requests.
- CVE-2026-96846Medium
Out-of-bounds read in WebDAV allows an authorized attacker to disclose information locally.
- CVE-2026-96843High
A heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in code that processes data in heap memory.
- CVE-2026-88137Medium
Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.
- CVE-2026-88136High
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
- CVE-2026-88135High
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-88126High
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-87714Medium
Missing authorization in WebDAV allows an authorized attacker to bypass a security feature over a network.
- CVE-2026-85828High
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-85827High
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
Original NVD description (English source)
A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS