CVE-2025-4569 - An insecure sensitive key storage issue was found in MyASUS

Back Back to CVE browser

HIGH

An insecure sensitive key storage issue was found in MyASUS

Published Jul 21, 2025

7.7

HIGH

CVSS 4.0

EPSS 0.35%

Description

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services.

Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information.

Affected products

Vendor ASUS Product MyASUS Default
unaffected
- Version
  4.0.35.0 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ASUS

MyASUS

unaffected

Version	Status	Constraints
4.0.35.0 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22065
Advisory
https://www.asus.com/content/security-advisory/
vendor-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22065		Advisory
https://www.asus.com/content/security-advisory/		vendor-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner ASUS

Published Jul 21, 2025

Updated Jul 22, 2025

Reserved May 12, 2025

Link CVE-2025-4569

CISA Vulnrichment

Updated Jul 21, 2025

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2025-4569

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-4569

ENISA EUVD

Assigner ASUS

Published Jul 21, 2025

Updated Jul 22, 2025

Exploited since n/a

Link EUVD-2025-22065

EUVD-2025-22065