ASUS DSL Router and Armory Crate App Security Update Advisory

Key Information Latest Security Updates Security Update for DSL Series Router - Type: Security Advisory - Affected Products: DSL-AC51, DSL-N16, DSL-AC750 - CVE ID: CVE-2025-59367 - Release Date: 2025-12-11 - Last Updated: 2025-11-13 Security Update for Armory Crate App - Type: Security Advisory - Affected Products: Versions below V6.3.4 - CVE IDs: CVE-2025-9336, CVE-2025-9337, CVE-2025-9338, CVE-2025-9968 - Release Date: 2025-12-10 - Last Updated: 2025-11-06 Vulnerability Disclosure Policy Responsible Reporting Guidelines: - Do not attempt unauthorized access or modification of any ASUS services, systems, products, or software. - Do not disclose, modify, damage, or abuse any data you may discover. - All information provided or received must remain strictly confidential. - Do not perform denial-of-service (DoS) attacks or any destructive testing that may impact information security. - Do not engage in social engineering or phishing activities targeting customers or employees. - Do not request compensation for time and resources spent discovering or verifying vulnerabilities. Excluded Submission Types: - Vulnerabilities in outdated software versions with known issues. - Insufficient rate limiting or lack of CAPTCHA validation mechanisms. - Missing or incomplete SPF, DMARC, or DKIM records. - Improperly configured cookies. - Vulnerabilities affecting only outdated or unpatched browsers, extensions, or other non-ASUS software. - Reports generated by automated tools without further vulnerability analysis. - Exposure of publicly accessible files or directories. - Low-risk issues related to clickjacking or UI elements. - Stack traces displayed on error pages instead of generic error messages. - Disclosure of technical or component information. - Account or email enumeration with no significant impact. - Missing non-mandatory security headers. - Inadequate HTTP security settings. - Low-risk CSRF issues. How to Report Security Vulnerabilities or Issues to ASUS: Provide your full name and contact information, along with a detailed description of the issue, including the affected ASUS service or system, a detailed description of the problem, steps to reproduce, technical details, and potential impact. PGP Public Key: Provide a link to the PGP public key for encrypted communication. What Happens Next: After resolving the issue, ASUS will provide support suitable for all affected customers and will regularly update software and descriptions of fixed issues.

Goal Reached Thanks to every supporter — we hit 100%!

ASUS DSL Router and Armory Crate App Security Update Advisory