ASUS Myasus vulnerabilities

5 CVEs affecting ASUS Myasus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12793, published 2026-01-06.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-22814, published 2022-03-10. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. The System Diagnosis service of MyASUS before 3.1.2.0 allows privilege escalation.
CVE-2025-4569, published 2025-07-21. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the…
CVE-2025-4570, published 2025-07-21. Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days. An insecure sensitive key storage issue was found in MyASUS. potentially allowing unauthorized actor to obtain a token that could be used to communicate with certain services. Refer to the…
CVE-2025-12793, published 2026-01-06. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from an attacker-controlled location, potentially…
CVE-2025-59373, published 2025-11-25. High severity, CVSS 8.5. EPSS: 0.1% chance of exploitation in the next 30 days. A local privilege escalation vulnerability exists in the restore mechanism of ASUS System Control Interface. It can be triggered when an unprivileged actor copies files without proper validation…