VPN files give attackers control over Asus routers
Your home network might be more vulnerable than you think. Recently, security experts have highlighted critical flaws in certain Asus routers that could expose network administrators to severe risks, particularly when dealing with VPN configurations and remote access protocols.
The vulnerability stems from how the router processes configuration files uploaded through its web management interface. Attackers discovered that by crafting a specially designed VPN client configuration file and uploading it, they could potentially execute arbitrary commands on the router. This is a massive security risk, one that the company has taken steps to address with patches.
This issue is particularly insidious because it relates to the way the system interprets text formatting instructions within the file, treating data as commands instead of simple information. While VPNs are tools used to bypass filters and access content, this specific flaw applies directly to the router itself, affecting the integrity of the network.
Separately, a second vulnerability exists that deals with remote access protocols. This bug allows an attacker to bypass security checks, potentially enabling Telnet access. If exploited, this flaw could allow commands to be run with elevated, “root privileges,” potentially compromising every device connected to the router.
Both issues are serious, with the associated CVEs—CVE-2026-14157 and CVE-2026-13313—scoring high on the Common Vulnerability Scoring System (CVSS) scale, registering 9.4 and 8.9 out of 10, respectively. This high rating underscores the severity of the potential compromise.
Asus strongly advises users to only import VPN client configuration files from completely trusted sources. In the interim, security experts recommend robust defensive measures. Users should adopt strong, unique administrator passwords, ensuring they are at least 10 characters long and include a mix of uppercase letters, numbers, and symbols.
Furthermore, to minimize risk while waiting for updates, it is crucial to avoid running scripts, tools, or commands from untrusted sources on any device within the local network. This proactive stance helps protect against potential threats, including those leveraging social engineering tactics.
The concern extends beyond the router itself. Research has also identified a distinct flaw affecting certain motherboards, including those in the Asus Z390 and C246 series. This issue allows a physically proximate attacker to read or write arbitrary system memory, a risk rated at 7.0 out of 10 severity. While the router flaws pose the immediate threat to network control, these findings serve as a reminder that comprehensive device security requires vigilance across the entire hardware ecosystem.
Buy on Amazon
Credit
