CVE-2025-3462

Published May 9, 2025

Last updated 11 days ago

ASUS DriverHub

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-3462 affects ASUS DriverHub and is limited to motherboards, not impacting laptops or desktop computers. The vulnerability stems from insufficient validation within the ASUS DriverHub software. This insufficient validation allows unauthorized sources to interact with the software's features through crafted HTTP requests. Further details can be found in the "Security Update for ASUS DriverHub" section of the ASUS Security Advisory.

Description: "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.
Source: 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 8.4
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:H/SC:N/SI:N/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: HIGH

Weaknesses

54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-346

Hype score: Not currently trending

References