Vendor

ASUS

3 of 14 ASUS CVEs in Patchfirst (21%) are in of vulnerabilities exploited in the wild.

CVEs: 14
In CISA KEV: 321%
Known ransomware use: 0
Median days to KEV: 630; from publication
Latest KEV listing: 17 Dec 2025

Watch ASUS Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Live Update In KEV: 1 CVEs: 1
Routers In KEV: 1 CVEs: 1
RT-AX55 Routers In KEV: 1 CVEs: 1
Router In KEV: 0 CVEs: 5
RT-AX55 In KEV: 0 CVEs: 4
BMC firmware for ASMB9-iKVM In KEV: 0 CVEs: 1
ZenWiFi XT8 In KEV: 0 CVEs: 1

Top ATT&CK techniques

What attackers do with ASUS CVEs

TechniqueCVEs
T1068Exploitation for Privilege Escalation CVEs: 1
T1040Network Sniffing CVEs: 1
T1098Account Manipulation CVEs: 1
T1078Valid Accounts CVEs: 1
T1133External Remote Services CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/asus.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are ASUS CVEs linked to the technique. Each link’s provenance is on the CVE page.

ASUS CVEs

14 CVEs, by priority

CVE-2021-32030ASUS Routers Improper Authentication Vulnerability
ASUS · RoutersKEVPublic exploitCritical · 9.8T1098Account Manipulation T1068Exploitation for Privilege Escalation+1 more
99.4%Top 0.06%
69.8priority
CVE-2023-39780ASUS RT-AX55 Routers OS Command Injection Vulnerability
ASUS · RT-AX55 RoutersKEVPublic exploitHigh · 8.8T1588Obtain Capabilities T1078Valid Accounts+3 more
39.5%Top 1.4%
68.9priority
CVE-2024-3080ASUS Router - Improper Authentication
ASUS · ZenWiFi XT8Public exploitCritical · 9.8
43.5%Top 1.3%
67.7priority
CVE-2025-2492An improper authentication control vulnerability exists in AiCloud
ASUS · RouterPublic exploitCritical · 9.2
1.1%Top 34%
66.9priority
CVE-2024-12912An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution
ASUS · RouterPublic exploitHigh · 7.2
1.2%Top 31%
65.5priority
CVE-2025-59374ASUS Live Update Embedded Malicious Code Vulnerability
ASUS · Live UpdateKEVCritical · 9.8T1195.002Compromise Software Supply Chain T1059Command and Scripting Interpreter
1.2%Top 32%
63.5priority
CVE-2023-41348ASUS RT-AX55 - command injection - 4
ASUS · RT-AX55High · 8.8
1.3%Top 30%
61.8priority
CVE-2023-41347ASUS RT-AX55 - command injection - 3
ASUS · RT-AX55High · 8.8
1.3%Top 30%
61.8priority
CVE-2023-41345ASUS RT-AX55 - command injection - 1
ASUS · RT-AX55High · 8.8
1.3%Top 30%
61.8priority
CVE-2023-41346ASUS RT-AX55 - command injection - 2
ASUS · RT-AX55High · 8.8
1.2%Top 32%
61.4priority
CVE-2021-28199ASUS BMC's firmware: buffer overflow - Modify user’s information function
ASUS · BMC firmware for ASMB9-iKVMMedium · 4.9
1.9%Top 21%
59.3priority
CVE-2026-14157Use of an Externally Controlled Format String in the ASUS Router modules allow a remote authenticated user to execute…
ASUS · RouterCritical · 9.4
0.8%Top 45%
19.0priority
CVE-2026-14911Improper Neutralization of Input During Web Page Generation (“Cross-site Scripting”) in ASUS router modules allows a…
ASUS · RouterCritical · 9.3
0.3%Top 75%
13.7priority
CVE-2026-19386A stack-based buffer overflow in the ASUS router modules allows an authenticated nearby user to execute arbitrary code…
ASUS · RouterCritical · 9.3
0.2%Top 91%
10.5priority