CVE-2025-15101: OS Command Injection
An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary system commands via a crafted parameter. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15101?
CVE-2025-15101 is classified as a high severity Cross-Site Request Forgery (CSRF) vulnerability.
How does CVE-2025-15101 affect ASUS routers?
CVE-2025-15101 allows an attacker to perform actions on an ASUS router with the privileges of an authenticated user.
How can I mitigate CVE-2025-15101?
To mitigate CVE-2025-15101, it is recommended to update your ASUS router firmware to the latest version provided by the manufacturer.
What ASUS router models are affected by CVE-2025-15101?
CVE-2025-15101 affects certain models of ASUS routers using the vulnerable Web management interface.
What are the symptoms of an exploit using CVE-2025-15101?
Symptoms of an exploit using CVE-2025-15101 may include unauthorized changes to router settings or unusual network activity.