CVE-2025-4570: ASUS Myasus

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the 'Security Update for for MyASUS' section on the ASUS Security Advisory for more information.

Affected products

• ASUS Myasus: up to and including 4.0.35.0

Published 2025-07-21. Last modified 2026-06-17.