CVE-2025-3463 Details
Description
"This issue is limited to motherboards and does not affect laptops, desktop computers, or other endpoints." An insufficient validation vulnerability in ASUS DriverHub may allow untrusted sources to affect system behavior via crafted HTTP requests. Refer to the 'Security Update for ASUS DriverHub' section on the ASUS Security Advisory for more information.
A vulnerability in ASUS DriverHub, specifically affecting motherboards, allows untrusted sources to manipulate system behavior through crafted HTTP requests. The issue arises from inadequate validation of the request origin, which can be exploited to execute arbitrary code remotely. This vulnerability is not present in laptops, desktop computers, or other endpoints.
ASUS has released a security update for ASUS DriverHub. Users can check the ASUS Product Security Advisory page for more information on the update.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed May 9, 2025CISA-ADP
Assessed May 9, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.asus.com/content/asus-product-security-advisory/ | ASUS | AdvisoryRemedyVendor |
| https://mrbruh.com/asusdriverhub/ | CVE | ExploitTechnical Analysis |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-295 | Improper Certificate Validation | ASUS |
Affected Products
| Product | Versions |
|---|---|
| ASUS DriverHub | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | ASUS |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| May 11, 2025 | CVE Modified | CVE |
| May 9, 2025 | New CVE Received | ASUS |