CVE-2025-4570mediumCWE-798

CVE-2025-4570: medium-severity vulnerability in ASUS MyASUS

Published · Updated

Follow this CVE+ Monitor MyASUS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.9epss 0.4%
An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N
Affected products
ASUS · MyASUS
Related CVEs — ASUS MyASUS

In the same product, most dangerous first.

CVE-2025-4569HIGHCVE-2025-4569EPSS 0.4%CVE-2025-59373HIGHCVE-2025-59373EPSS 0.1%