Vulnerability · Published Nov 25, 2025 · Assigned by ASUS

CVE-2025-59365

Medium 6.9

In plain English

A medium-severity stack buffer overflow in Router from ASUS. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).

Severity (CVSS 4.0)6.9Medium

Exploit odds (30 days)0.4%top 60.8% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A stack buffer overflow vulnerability has been identified in certain router models. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Affected products (as reported)

Vendor	Product	Versions
ASUS	Router	3.0.0.4_3863.0.0.4_3883.0.0.6_102

Weakness: CWE-121 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

References

https://www.asus.com/security-advisory/ vendor-advisory