These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The CVE record for CVE-2019-25764 was published on 2026-07-17T07:16:37.193Z and has not been modified since then. The NVD entry is currently Received. This Exposed IOCTL with Insufficient Access Control vulnerability in the ASUS AURA SYNC driver allows a local user to bypass the driver's verification and invoke arbitrary IOCTLs, potentially resulting in privilege escalation. Users should review the ASUS S [truncated]
A high-severity vulnerability, CVE-2026-13585, was found in the ASUS System Control Interface driver and ASUS Business Manager. This vulnerability, with a CVSS score of 8.2, allows a local administrator to disclose sensitive information via crafted IOCTL requests, potentially leading to a Denial of Service (DoS) on the system. The vulnerability is related to Allocation of Resources Without Limits and Thro [truncated]
An Improper Validation of Integrity Check Value and Improper Certificate Validation in certain ASUS router models allows a remote man-in-the-middle (MITM) user to make the router download and execute arbitrary command via a spoofed server. This vulnerability affects ASUS routers with specific firmware versions. Users should review the ASUS Security Advisory for updates and apply patches as available. The [truncated]
The CVE record for CVE-2022-4990 was published on 2026-07-03T03:16:23.087Z and has not been modified since then. The NVD entry is currently Deferred. This Improper Validation of Specified Quantity in Input vulnerability in the ASUS AI Suite 3 driver allows a local user to bypass security validation and access restricted memory blocks via crafted IOCTL requests, leading to privilege escalation. Users and a [truncated]
The CVE-2022-4989 record was published on 2026-07-03T03:16:22.100Z and has not been modified since then. The ASUS AI Suite 3 driver has a vulnerability due to improper validation of specified quantity in input, allowing a local user to access unintended memory regions via crafted IOCTL requests, leading to privilege escalation. This vulnerability has a high CVSS score of 8.5 and is classified as HIGH seve [truncated]
CVE-2026-8070 is a high-severity local privilege escalation vulnerability in ASUS Armoury Crate, published on 2026-05-29. The flaw stems from incorrect permission assignment (CWE-732) for a critical resource, enabling a local attacker with low privileges to bypass the driver's validation mechanism and gain unauthorized read/write access to physical memory. The CVSS 4.0 vector indicates local attack vector [truncated]
A local privilege escalation vulnerability in ASUS System Control Interface allows an authenticated low-privilege attacker to gain SYSTEM privileges through a crafted RPC call that bypasses validation. The flaw stems from incorrect permission assignment for a critical resource (CWE-732), enabling arbitrary code execution at the highest privilege level on affected Windows endpoints. The vulnerability requi [truncated]
CVE-2025-59374 is a CISA Known Exploited Vulnerability affecting ASUS Live Update. CISA’s KEV listing indicates this issue is known to be exploited and should be treated as a high-priority remediation item. The source corpus provided here does not include a CVSS score or additional exploit detail, so defenders should rely on the vendor’s mitigation guidance and CISA’s remediation timeline.
CVE-2023-39780 is an ASUS RT-AX55 router vulnerability described as an OS command injection issue and listed by CISA in the Known Exploited Vulnerabilities catalog. Because CISA marked it as known exploited, affected deployments should be treated as urgent even though the supplied corpus does not include firmware scope, authentication requirements, or exploit conditions.
CVE-2021-32030 is an ASUS Routers improper authentication vulnerability that CISA added to its Known Exploited Vulnerabilities catalog on 2025-06-02. Because CISA flags it as known exploited, organizations using affected ASUS router products should treat remediation as urgent and follow ASUS guidance or other CISA-recommended mitigations.
CVE-2017-5632 is a denial-of-service issue affecting ASUS RT-N56U firmware 3.0.0.4.374_979. According to the supplied NVD record, an attacker on the local network can trigger a crash of the device’s WAN connection by running an nmap -O command against the target IP, which can disconnect the router from the Internet.