Most Exploited Internet-Facing Products

MEIFP

Back to Ranking

ASUS

Products: RT-AX55 · live update

67.0

Score

2

CVEs

2

Active

0

PoC

2

KEV

#37

Rank

Period:

Product:

CVE ID	Published	CVSS	Exploit	KEV	AC	PR	Auto	Score(hover)	Affected Products	Description
CVE-2025-59374	2025-12-17	9.3v4.0	ACTIVE		Low	None	YES	40.6	live update	"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that me
CVE-2023-39780	2023-09-11	8.8v3.1	ACTIVE		Low	Low	no	26.4	RT-AX55	On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: for the similar "token-generated module" issue, see CVE-2023-41345; for the similar "token-refresh module" issue, see CVE-2023-41346; for the

Each CVE: 10 pts base (Active only), boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3