Asus

www.asus.com ↗ ⚠ 1 CISA KEV
D
RISKY
71
Total CVEs
12
Crit / High
4
Medium
60%
Unpatched
0%
Patched
7.3
Avg CVSS
1
CISA KEV
// Data sourced from NVD · CISA KEV · RHSA · GHSA · Debian · OSV · EPSS · Exploit-DB How we collect data →
// INTEL UPGRADE
Full Company Dossier — Coming Soon
Executive profiles, financial exposure, M&A risk, breach history & supply-chain threat mapping — all in one place.
OSINT FINANCIALS EXEC PROFILES BREACH DB
▸ CVE Trend by Year
▸ Patch Coverage
Patched
0%
Unpatched
60%
Under Review
15%
Pending
25%
✓ 0 patched ✗ 12 unpatched ~ 3 under review ⏳ 5 pending score
▸ Intelligence by Audience
PoC Available
7 / 20 shown
CISA KEV (Exploited)
1
Shodan Dorks
ssl:"asus" port:443
org:"Asus" http.status:200
Top EPSS (Exploitation Probability)
CVE-2022-35401 20.85% exploitation probability
CVE-2022-38393 18.85% exploitation probability
CVE-2023-26602 17.40% exploitation probability
CVE-2022-4221 4.82% exploitation probability
CVE-2024-42757 3.79% exploitation probability
Quick Facts for Reporting
Total CVEs tracked
71
Critical severity
3
Actively exploited (CISA)
1
Unpatched ratio
60%
Avg CVSS score
7.3
Security grade
D (RISKY)
NVD Data Attribution
Source: NIST National Vulnerability Database (NVD) + GitHub Advisory Database.
Data aggregated by Valters IT Hub · valtersit.com
Last updated: 2026-08-03
Security Risk Score (for investors)
LOW
Vuln Volume
POOR
Patch Responsiveness
LOW
CISA Exposure
⚠ Not financial advice. Past security incidents do not guarantee future stock performance.
▸ Security News Google News
ASUS Patches Critical Router Vulnerability Enabling Remote Command Execution - CyberSecurityNews
CyberSecurityNews 2026-07-22
CISA warns ASUS Live Update backdoor is still exploitable, seven years on - Malwarebytes
Malwarebytes 2025-12-19
RondoDox Botnet Exploits Critical 2018 Vulnerability to Hijack ASUS Routers - Hackread
Hackread 2026-05-23
ASUS Control Center Flaw Allows Attackers to Gain Full Admin Control of the System - CyberSecurityNews
CyberSecurityNews 2026-09-06
Researchers discover massive Wi-Fi vulnerability affecting multiple access points — AirSnitch lets attackers on the same network intercept data and launch machine-in-the-middle attacks - Tom's Hardware
Tom's Hardware 2026-02-26
CISA Warns of Exploited Flaw in Asus Update Tool - SecurityWeek
SecurityWeek 2025-12-18
▸ Recent CVEs showing 20 of 20
CVE IDSeverityPatchEPSSDate
CVE-2025-59374 KEV 9.8 CRITICAL PATCH UNDER REVIEW 1.20% 2025-12-17
CVE-2025-1354 4.8 MEDIUM UNKNOWN / UNPATCHED 0.45% 2025-02-16
CVE-2024-55408 5.1 MEDIUM UNKNOWN / UNPATCHED 0.24% 2025-01-06
CVE-2024-42757 PoC ? N/A UNKNOWN / UNPATCHED 3.79% 2024-08-15
CVE-2024-33278 9.8 CRITICAL UNKNOWN / UNPATCHED 0.83% 2024-06-24
CVE-2024-0401 7.2 HIGH PATCH UNDER REVIEW 0.73% 2024-05-20
CVE-2023-33548 PoC ? N/A UNKNOWN / UNPATCHED 0.16% 2024-05-06
CVE-2023-35720 PoC 6.5 MEDIUM UNKNOWN / UNPATCHED 0.16% 2024-05-03
CVE-2023-31889 PoC ? N/A UNKNOWN / UNPATCHED 0.06% 2024-04-29
CVE-2024-28328 5.4 MEDIUM UNKNOWN / UNPATCHED 0.37% 2024-04-26
CVE-2024-28327 8.4 HIGH UNKNOWN / UNPATCHED 0.14% 2024-04-26
CVE-2024-28325 6.1 MEDIUM UNKNOWN / UNPATCHED 0.15% 2024-04-26
CVE-2024-30804 9.8 CRITICAL UNKNOWN / UNPATCHED 0.82% 2024-04-26
CVE-2024-28326 6.8 MEDIUM UNKNOWN / UNPATCHED 0.27% 2024-04-26
CVE-2024-26342 PoC ? N/A UNKNOWN / UNPATCHED 0.54% 2024-02-28
CVE-2023-26602 PoC ? N/A UNKNOWN / UNPATCHED 17.40% 2023-02-26
CVE-2022-38393 7.5 HIGH UNKNOWN / UNPATCHED 18.85% 2023-01-10
CVE-2022-38105 7.5 HIGH UNKNOWN / UNPATCHED 1.08% 2023-01-10
CVE-2022-35401 9.0 CRITICAL UNKNOWN / UNPATCHED 20.85% 2023-01-10
CVE-2022-4221 PoC 9.8 CRITICAL PATCH UNDER REVIEW 4.82% 2022-12-01
View all 20 CVEs for Asus →
▸Intel
HQTaipei, Taiwan
Founded1989
CEOS.Y. Hsu
Trust ScoreD — RISKY
Max CVSS9.8
Last Updated2026-08-03
▸Top Weaknesses
CWE-121
Unknown Weakness Type
6 occurrences in Asus CVEs (8% of total)
CWE-121 ⓘ
6
CWE-20
Unknown Weakness Type
4 occurrences in Asus CVEs (6% of total)
CWE-20 ⓘ
4
CWE-287
Improper Authentication
4 occurrences in Asus CVEs (6% of total)
CWE-287 ⓘ
4
CWE-79
Cross-Site Scripting (XSS)
4 occurrences in Asus CVEs (6% of total)
CWE-79 ⓘ
4
CWE-78
Unknown Weakness Type
4 occurrences in Asus CVEs (6% of total)
CWE-78 ⓘ
4
CWE-77
Unknown Weakness Type
3 occurrences in Asus CVEs (4% of total)
CWE-77 ⓘ
3
CWE-125
Out-of-Bounds Read
3 occurrences in Asus CVEs (4% of total)
CWE-125 ⓘ
3
CWE-476
NULL Pointer Dereference
3 occurrences in Asus CVEs (4% of total)
CWE-476 ⓘ
3
▸Company Profile

ASUS is a multinational computer hardware and electronics company headquartered in Taiwan, best known for its motherboards, laptops (including the ROG and TUF gaming lines), and networking equipment. Its software products, such as ASUS Armoury Crate, AI Suite, and router firmware, have been the subject of numerous CVEs, making the company a significant vendor in the cybersecurity landscape due to the widespread deployment of its devices.

▸Response Metrics
Est. MTTR ⓘ ~500 days (Critical)
Mean Time To Remediate. Estimates days from CVE disclosure to patch.
Industry avg: ~60d (good) · 100-300d (poor) · 300d+ (critical)
CVE Trend ⓘ ↘ -61% better
CVE count 2026 vs 2025:  33 → 13 CVEs
Patch Speed ⓘ Poor (>65% open)
60% of CVEs still unpatched.  Excellent: <20% · Good: 20-40% · Avg: 40-65% · Poor: >65%
▸ Financial Risk Estimate
Est. GDPR Low
€645K
Est. GDPR High
€6.4M

Based on 3 critical CVEs, 1 CISA KEV, 96% unpatched. Model: GDPR Art.83 · not legal advice.

▸Actions
⚖ Compare with another vendor
▸Embed Badge
Asus D valtersit.com