WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide

🗓️ 19 Nov 2025 13:00:00Reported by The Hacker NewsType

WrtHug hijacks end-of-life ASUS WRT routers via six flaws with a long-lived AiCloud certificate.

Reporter	Title	Published	Views	Family All 94
GithubExploit	Exploit for CVE-2024-12912	12 May 202605:36	–	githubexploit
ATTACKERKB	CVE-2023-39780	11 Sep 202300:00	–	attackerkb
BDU FSTEC	The vulnerability of ASUS RT-AX55 router’s microprogramming software lies in insufficient checking of arguments passed in commands, allowing attackers to execute arbitrary commands.	13 Sep 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the authentication function of ASUS RT-AX55 router’s microprogramming software allows a hacker to execute arbitrary commands.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the authentication function of ASUS RT-AX55 router’s microprogramming software allows a hacker to execute arbitrary commands.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the authentication function of ASUS RT-AX55 router’s microprogramming software allows a hacker to execute arbitrary commands.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the authentication function of ASUS RT-AX55 router’s microprogramming software allows a hacker to execute arbitrary commands.	6 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ASUS AiCloud cloud platform, which stems from the lack of measures taken to clean data at the management level, allows a hacker to execute arbitrary codes.	3 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the ASUS AiCloud cloud platform, related to bypassing authentication by using an alternative path or channel, allows a perpetrator to execute arbitrary commands.	21 Apr 202500:00	–	bdu_fstec
Circl	CVE-2023-39780	11 Sep 202322:27	–	circl