CNNVD-202512-3305 Information
Dec 17, 2025
cve
CNNVD ID
CNNVD-202512-3305
Related CVE
- CNNVD Published: 2025-12-17
Description (Chinese)
ASUS Live Update是中国华硕（ASUS）公司的一款自动驱动与固件更新工具。 ASUS Live Update存在安全漏洞，该漏洞源于供应链攻击导致版本被篡改，可能导致设备执行非预期操作。
Description (English)
ASUS Live Update is an auto-driven and solidware update tool for China’s Huashu (ASUS) company. There is a security loophole in ASUS Live Update, which stems from a supply chain attack that resulted in the version being tampered with and could lead to the unexpected operation of the equipment.
Hazard Level
Low
Vulnerability Type
其他
Affected Vendor
华硕
Published
2025-12-17
Last Modified
2026-02-24
References
https://www.asus.com/news/hqfgvuyz6uyayje1/ https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-59374
Patch
https://www.asus.com/security-advisory/
Share on: