Critical CVE-2025-59367 flaw lets hackers access ASUS DSL routers remotely

ASUS has patched a critical authentication-by-pass flaw, tracked as CVE-2025-59367, in several DSL routers, allowing remote, unauthenticated attackers to access unpatched devices. The vulnerability affects the DSL-AC51, DSL-N16 and DSL-AC750 router families, with firmware version 1.1.2.3_1010 released to address the issue, which carries a CVSS score of 9.3.

The advisory notes that a security vulnerability has been identified in certain ASUS DSL Series Router and recommends updating to the latest firmware to remain protected, according to ASUS security advisory. For unsupported end-of-life models, the guidance includes using strong unique passwords and disabling internet-exposed services such as WAN access, port forwarding, DDNS, VPN server, DMZ, port triggering, and FTP.

Networking devices like ASUS routers are a prime target for botnets, and in May 2025 GreyNoise researchers warned of a new AyySSHush botnet that compromised over 9,000 ASUS routers with a persistent SSH backdoor.