CVE-2025-59370
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk62th percentile - higher than 62% of all known CVEs
Summary
A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could exploit it to execute arbitrary commands, leading the device to execute unintended instructions.
Risk Assessment
An authenticated attacker can remotely inject commands and cause the device to perform unintended operations. This may result in configuration changes or further device exploitation.
Recommendation
Apply the ASUS Router Firmware security update as described in the ASUS Security Advisory. Restrict administrative access to the device from trusted networks.
Other vulnerabilities in bwdpi
Original NVD description (English source)
A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary commands, leading to the device executing unintended instructions. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS