CVE-2025-15101 - Vulnerability Analysis

Overview

ASUS routers contain a cross site request forgery caused by lack of proper request validation in the web management interface, letting attackers perform actions with authenticated user privileges, exploit requires user to be authenticated.

Severity & Score

Impact

Attackers can perform actions with authenticated user privileges, potentially leading to system command execution and device compromise.

Mitigation

Update to the latest firmware version as per ASUS Security Advisory.

References

• https://www.asus.com/security-advisory/

Social Media Activity(1 post)

TheHackerWire

@thehackerwire

Mar 26, 2026

🟠 CVE-2025-15101 - High (8.8) A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the Web management interface of certain ASUS router models. This vulnerability potentially allows actions to be performed with the existing privileges of an authenticated use... 🔗 https://www.thehackerwire.com/vulnerability/CVE-2025-15101/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

View original post

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner