H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2025-12-17
Last seen2025-12-17

Confidence

—

ASUS Live Update contains an embedded malicious code vulnerability client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. The impacted product could be end-of-life (EoL) and/or end-of-service (EoS). Users should discontinue product utilization.

Labels

exploitedkev

CISA KEV context

Vendor / productASUS Live Update
Added2025-12-17
Due date2026-01-07
4 recorded

Relationships

mitigatesMitigation
related-toTechnique
related-toTechnique
2 external

References

nvd
CVE-2025-59374
open
cwe
CWE-506
open