CVE-2025-12003: Path Traversal

Published Nov 25, 2025

Updated

A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to the ' Security Update for ASUS Router Firmware' section on the ASUS Security Advisory for more information.

Affected Software

1 affected component

ASUS Router Firmware

Event History

Nov 25, 2025

CVE Published

via MITRE·07:28 AM

Data Sourced

via MITRE·07:28 AM

DescriptionWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2025-12003?

CVE-2025-12003 has a high severity rating due to its potential to allow unauthenticated remote attackers to compromise device integrity.

How do I fix CVE-2025-12003?

To fix CVE-2025-12003, apply the latest security update for ASUS Router Firmware as recommended in ASUS's security advisory.

What systems are affected by CVE-2025-12003?

CVE-2025-12003 specifically affects ASUS Router Firmware.

Can CVE-2025-12003 be exploited without authentication?

Yes, CVE-2025-12003 can be exploited by unauthenticated remote attackers.

What impact does CVE-2025-12003 have on device integrity?

CVE-2025-12003 may allow attackers to impact the integrity of the affected device through path traversal.