ASUS Issues Security Patch for Router Vulnerability

ASUS released a security update addressing CVE-2025-15101, a high-severity CSRF vulnerability in the web management interface of several router models (CVSSv4 8.5). The flaw could allow an attacker to trick an authenticated user's browser into performing unauthorized actions—including session hijacking, executing system commands, and altering sensitive network settings—and ASUS advises users to upgrade to firmware 3.0.0.6_102 or later via the official support site.