CVE-2025-59369mediumCWE-89

CVE-2025-59369: medium-severity vulnerability in ASUS Router

Published

Follow this CVE+ Monitor Router

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 0.5%
A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
Affected products
ASUS · Router
Related CVEs — ASUS Router

In the same product, most dangerous first.

CVE-2025-59366CRITICALCVE-2025-59366EPSS 12.5%CVE-2024-12912HIGHCVE-2024-12912EPSS 1.2%CVE-2026-75779HIGHCVE-2026-75779EPSS 1.2%CVE-2025-2492CRITICALCVE-2025-2492EPSS 1.1%CVE-2024-13062HIGHCVE-2024-13062EPSS 1.0%CVE-2025-59370HIGHCVE-2025-59370EPSS 1.0%