An improper authentication control vulnerability exists in AiCloud
ASUS · Router
An improper authentication control flaw in the AiCloud component of ASUS Router products can be triggered by a crafted request. Remote, unauthenticated attackers who can reach the device over the network without user interaction may be able to execute functions without authorisation.
An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 7 months after disclosure. Public exploit code (PoC-in-GitHub) appeared 13 months after disclosure.
- Disclosedday 0
- First seen exploitedVulnCheck KEV evidence+7 mo
- Public exploit codePoC-in-GitHub+13 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.