CVE-2025-3462: High severity asus driverhub vulnerability

Published May 9, 2025

Updated

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation in ASUS DriverHub may allow unauthorized sources to interact with the software's features via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

Affected Software

1 affected component

ASUS DriverHub

Event History

May 9, 2025

CVE Published

via MITRE·05:36 AM

Data Sourced

via MITRE·05:36 AM

DescriptionWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeakness

May 12, 2025

News Published

via BleepingComputer·09:26 PM

News Published

via BleepingComputer·09:27 PM

Known Exploited

09:33 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

CVE-2025-3463

Frequently Asked Questions

What is the severity of CVE-2025-3462?

CVE-2025-3462 is considered a high severity vulnerability due to insufficient validation allowing unauthorized access to ASUS DriverHub.

How do I fix CVE-2025-3462?

To fix CVE-2025-3462, users should update their ASUS DriverHub to the latest version provided by ASUS.

Which systems are affected by CVE-2025-3462?

CVE-2025-3462 specifically affects motherboards using the ASUS DriverHub and does not impact laptops or desktop computers.

What type of exploitation is possible with CVE-2025-3462?

CVE-2025-3462 allows unauthorized sources to interact with ASUS DriverHub features via crafted HTTP requests.

Is there a workaround for CVE-2025-3462?

Currently, the best approach to mitigating CVE-2025-3462 is to apply the official security update from ASUS.