Approved changes feed: RSS · Atom

cpe:2.3:a:asus:router:3.0.0.4_386:*:*:*:*:*:*:*

part: a version: 3.0.0.4_386 update: *

VendorAsus (8cdf1a5f-f554-5682-aa69-77df29ab6a26)
ProductRouter (10f5ad93-9c8d-5537-bf01-a759cdbbad64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59372 vulnerable 2026-06-08 07:35:21.740493 Details available
A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files outside the intended directory, potentially affecting device integrity. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:30:54.219Z
Updated: 2025-11-25T14:04:34.837Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59371 vulnerable 2026-06-08 07:35:21.740017 Details available
An authentication bypass vulnerability has been identified in the IFTTT integration feature. A remote, authenticated attacker could leverage this vulnerability to potentially gain unauthorized access to the device. This vulnerability does not affect Wi-Fi 7 series models. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:30:34.849Z
Updated: 2026-02-26T16:07:35.646Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59370 vulnerable 2026-06-08 07:35:21.739520 Details available
A command injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary commands, leading to the device executing unintended instructions. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:30:09.518Z
Updated: 2026-02-26T16:07:36.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59369 vulnerable 2026-06-08 07:35:21.738925 Details available
A SQL injection vulnerability has been identified in bwdpi. A remote, authenticated attacker could leverage this vulnerability to potentially execute arbitrary SQL queries, leading to unauthorized data access. Refer to the 'Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:29:38.384Z
Updated: 2025-11-25T14:16:36.842Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59368 vulnerable 2026-06-08 07:35:21.738520 Details available
An integer underflow vulnerability has been identified in Aicloud. An authenticated attacker may trigger this vulnerability by sending a crafted request, potentially impacting the availability of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.
Published: 2025-11-25T07:29:09.256Z
Updated: 2025-11-25T14:20:24.647Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59366 vulnerable 2026-06-08 07:35:21.723826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59365 vulnerable 2026-06-08 07:35:21.721688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12003 vulnerable 2026-06-08 07:04:29.537376 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.