Asus has released an emergency firmware update for several DSL router models. The patch fixes a critical vulnerability that allows attackers to take complete control of devices without authentication.

The vulnerability, identified as CVE-2025-59367 and affects DSL-AC51, DSL-N16, and DSL-AC750 routers.

CVE-2025-59367 is patched in the latest firmware version 1.1.2.3_1010.

Experts also report that attackers may be exploiting legacy vulnerabilities in Asus routers, such as brute-force to guess credentials, authentication bypass, and command injection vulnerabilities (CVE-2023-39780, CVE-2024-12912, CVE-2023-41345/46/47/48, CVE-2025-2492) that allow to compromise routers including the 4G-AC55U, 4G-AC860U, DSL-AC68U, GT-AC5300, GT-AX11000, RT-AC1200HP, RT-AC1300GPLUS, and RT-AC1300UHP models.

ASUS recommends users to apply the latest updates or to replace older Asus router devices with newer, supported models.

Source: asus.com