ASUS has disclosed a critical authentication bypass vulnerability affecting multiple router models with AiCloud enabled, which could allow remote attackers to execute unauthorized functions without authentication by sending specially crafted requests. The flaw, tracked as CVE-2025-2492 (CVSS 9.2/10), stems from improper authentication controls in the firmware and impacts devices running firmware branches 3.0.0.4_382, _386, _388, and 3.0.0.6_102. AiCloud, a cloud-based feature that enables remote access to files and media via connected USB drives, increases the potential risk by exposing affected routers to the internet. While no active exploitation or public proof-of-concept (PoC) has been reported, ASUS strongly urges users to apply the latest firmware updates immediately, available through the support portal or product finder page. As an added precaution, users should use strong, unique passwords for both wireless and administrative access. For end-of-life products or scenarios where patching is not feasible due to the negative impact on critical business processes, ASUS recommends disabling AiCloud and all externally accessible services, including WAN access, DDNS, VPN server, DMZ, port forwarding, port triggering, and FTP, to reduce the attack surface and mitigate exploitation risks. CTIX analysts urge all administrators to prioritize mitigating this vulnerability by patching or following the manual defensive measures listed in the advisory.