עברית

Vulnerability Intelligence

CVE-2025-59367

Critical 9.8

Published
Last modified
NVD status
Analyzed

Description

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information.

Affected products

asus: dsl-ac51 firmware; asus: dsl-ac51; asus: dsl-n16 firmware; asus: dsl-n16; asus: dsl-ac750 firmware; asus: dsl-ac750

References2

Metrics

CVSS 3.1
9.8 CRITICAL Score source: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 4.0
9.3 CRITICAL Score source: CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
EPSS — exploit probability
1% percentile: 59 · as of 10 November 2026
CWE
CWE-288CWE-306

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.