PT-2026-58872 · Asus · Asus Routers
CVE-2026-13385
·
Published
2026-07-15
·
Updated
2026-07-16
CVSS v4.0
9.5
Critical
| Vector | AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
Name of the Vulnerable Software and Affected Versions
ASUS router models (affected versions not specified)
Description
Improper Validation of Integrity Check Value and Improper Certificate Validation allow a remote man-in-the-middle (MITM) user to force the router to download and execute arbitrary commands via a spoofed server. A man-in-the-middle attack occurs when an attacker secretly relays and possibly alters the communications between two parties who believe they are directly communicating with each other.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Certificate Validation
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Asus Routers