CVE-2025-3463

Published May 9, 2025

Last updated 2 months ago

ASUS DriverHub

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-3463 is a vulnerability in ASUS DriverHub that stems from insufficient validation of HTTP requests. This flaw could allow unauthorized sources to affect system behavior by sending specially crafted HTTP requests to the DriverHub software. The vulnerability is limited to motherboards and does not affect laptops, desktop computers, or other endpoints. Successful exploitation could allow untrusted sources to interact with the software's features. ASUS urges users to update ASUS DriverHub to the latest version 1.0.6.0 or newer.

Description: "This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.
Source: 54bf65a7-a193-42d2-b1ba-8e150d3c35e1
NVD status: Awaiting Analysis

Risk scores

CVSS 4.0

Type: Secondary
Base score: 9.4
Impact score: -
Exploitability score: -
Vector string: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Severity: CRITICAL

Weaknesses

54bf65a7-a193-42d2-b1ba-8e150d3c35e1: CWE-295

Hype score: Not currently trending

References