Malicious VPN config files can let attackers run commands on Asus routers
- ID
- 31449
- Status
- summarized
- Published
- 03 Oct 2026, 8:30 PM
- Fetched
- 03 Oct 2026, 10:07 PM
- Provider
- Tom's Hardware
- Category
- technology
- Original URL
- https://www.tomshardware.com/tech-industry/cyber-security/malicious-vpn-config-files-can-let-attackers-run-commands-on-asus-routers-companys-patch-also-fixes-a-bug-that-lets-a-logged-in-attacker-switch-on-telnet-with-root-access
- Source URL
- https://www.tomshardware.com/feeds/all
Summary
- Score
- 3.0
- Created
- 03 Oct 2026, 10:08 PM
- Tags
- Audience
- developers
What happened
Tom's Hardware reports that malicious VPN configuration files can be used to run commands on Asus routers, and that Asus's patch for this also fixes a second bug allowing an already logged-in attacker to turn on Telnet with root access. The item names no CVE identifier, no affected router models, no firmware version, and no patch release date — the supplied text is almost entirely site navigation and subscription copy rather than article body.
Why it matters
This only changes behaviour for people who terminate VPN connections on an Asus router — typically home-office or small-office setups. Because the text gives no CVE, model list, or firmware version, you cannot triage from this item alone; you would need to check Asus's own advisory and confirm your router's firmware build before deciding whether to patch or move VPN termination off the router. For everyone else shipping software, there is nothing actionable here.
Discussion angle
Is your team's remote-access path dependent on consumer-grade router firmware? Worth a quick check of what actually terminates your VPN versus what you assume does.