CVE-2025-3463: Critical severity asus driverhub vulnerability

Published May 9, 2025

Updated

"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.

Affected Software

1 affected component

ASUS DriverHub

Event History

May 9, 2025

CVE Published

via MITRE·05:37 AM

Data Sourced

via MITRE·05:37 AM

DescriptionWeakness

Data Sourced

via NVD·06:15 AM

DescriptionSeverityWeakness

May 12, 2025

News Published

via BleepingComputer·09:26 PM

News Published

via BleepingComputer·09:27 PM

Known Exploited

09:33 PM

Peer vulnerabilities

Found alongside the following vulnerabilities.

CVE-2025-3462

Frequently Asked Questions

What is the severity of CVE-2025-3463?

CVE-2025-3463 is classified as a moderate severity vulnerability due to insufficient validation in ASUS DriverHub.

How do I fix CVE-2025-3463?

To fix CVE-2025-3463, users should ensure they have the latest security updates for ASUS DriverHub installed.

Who is affected by CVE-2025-3463?

CVE-2025-3463 primarily affects motherboards equipped with ASUS DriverHub, excluding laptops and desktop computers.

What type of vulnerability is CVE-2025-3463?

CVE-2025-3463 is an insufficient validation vulnerability that allows potential exploitation via crafted HTTP requests.

What impact does CVE-2025-3463 have on affected systems?

CVE-2025-3463 can allow untrusted sources to affect system behavior, potentially leading to unauthorized actions on the motherboard.