CVE-2025-3463

State: Published
Severity: 9.4 Critical
Published: May 9, 2025
Updated: May 19, 2025
Reserved: Apr 9, 2025

Description

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

Scores

CVSS	Score	Vector	Source
4.0	9.4 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	ASUS

Weaknesses

CWE-295 Improper Certificate Validation

Affected Products

Product	Versions
DriverHubASUS	before 1.0.6.0Affected

References

https://www.asus.com/content/asus-product-security-advisory/vendor-advisory
https://mrbruh.com/asusdriverhub/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.