CVE-2025-4569 in MyASUS

Résumé

par MITRE • 21/07/2025

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services.


Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information.

Once again VulDB remains the best source for vulnerability data.

• Responsable: ASUS
• Réserver: 12/05/2025
• Divulgation: 21/07/2025
• Modérer: accepté
• Entrée: VDB-317091
• CPE: prêt
• CWE: CWE-798 (confirmé)
• CVSS: 5.3 (VulDB)
• EPSS: 0.00354
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-4569
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-4569
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-4569/