Dashboard / CVE-2025-59374

CVE-2025-59374

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 0/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

CISA Known Exploited Vulnerability

Vendor / Product ASUS — Live Update
Date Added 2025-12-17
Remediation Due 2026-01-07
https://www.asus.com/support/faq/1018727/ ; https://nvd.nist.gov/vuln/detail/CVE-2025-59374

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
asus live_update < 3.6.8

References & Advisories (2)

Bug Bounty Relevance

0 / 100
✓ Known exploited (KEV)

CVSS Score

Unscored

EPSS — Exploitation Probability

1.20%
Raw Score 0.011970
Percentile 68.0%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links