CVE-2025-59368

MediumCVSS 6.0

Published: 25/11/2025(UTC)Updated: 18/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

31th percentile - higher than 31% of all known CVEs

Summary

An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger it by sending a crafted request, potentially impacting device availability.

Risk Assessment

An authenticated attacker could cause a denial of service or device crash.

Recommendation

Apply the ASUS security update for router firmware as described in the ASUS Security Advisory.

Other vulnerabilities in Aicloud

CVE-2025-59366Critical
In AiCloud, an authentication-bypass vulnerability exists, triggered by an unintended side effect of the Samba functionality, potentially allowing execution of specific functions without proper authorization.

Original NVD description (English source)

An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS