QwikSec

Security Database

CVE

CWE

Training

CVE-2025-2492

Published: Apr 18, 2025

Modified: Feb 24, 2026

PUBLISHED

Description

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

Vendor	Product	Versions
ASUS	Router	affected `3.0.0.4_382 series` affected `3.0.0.4_386 series` affected `3.0.0.4_388 series` affected `3.0.0.6_102 series`

Weaknesses (CWE)

References

https://www.asus.com/content/asus-product-security-advisory/

vendor-advisory

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.