Riskcovery

CVE-2025-12003

State
Published
Severity
8.2 High
Published
Nov 25, 2025
Updated
Nov 25, 2025
Reserved
Oct 21, 2025

Read the record on cve.org

Description

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Scores

CVSSScoreVectorSource
4.08.2 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:NASUS

Weaknesses

  • CWE-306 Missing Authentication for Critical Function
  • CWE-22 Path Traversal

Affected Products

ProductVersions
RouterASUS
  • 3.0.0.4_386Affected
  • 3.0.0.4_388Affected
  • 3.0.0.6_102Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.