CVE-2025-59367

The vulnerability results from flawed implementation of authentication mechanisms (CWE-288) or complete absence of required authentication for critical functions (CWE-306). A network attacker can bypass login procedures without needing any credentials, user interaction, or fulfillment of special conditions. The attack can be conducted remotely over the network, which significantly increases the risk of exploitation.

An attacker can gain unauthorized access to the router's management system, potentially allowing full control of the device, modification of network configuration, and enabling further attacks on devices in the local network.

Apply patches available from the manufacturer according to the references — detailed information about firmware updates can be found in the ASUS Security Advisory message in the 'Security Update for DSL Series Router' section at https://www.asus.com/security-advisory

ASUS DSL-AC51, ASUS DSL-AC51 Firmware, ASUS DSL-N16, ASUS DSL-N16 Firmware, ASUS DSL-AC750 — specific firmware versions indicated in the manufacturer's references (ASUS Security Advisory, 'Security Update for DSL Series Router' section)