{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T14:06:31.342","vulnerabilities":[{"cve":{"id":"CVE-2025-3464","sourceIdentifier":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","published":"2025-06-16T09:15:19.233","lastModified":"2026-06-17T09:20:00.060","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"A race condition vulnerability exists in Armoury Crate. This vulnerability arises from a Time-of-check Time-of-use issue, potentially leading to authentication bypass.\nRefer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information."},{"lang":"es","value":"Existe una vulnerabilidad de condición de ejecución en Armoury Crate. Esta vulnerabilidad se debe a un problema de tiempo de uso y tiempo de comprobación, que podría provocar la omisión de la autenticación. Consulta la sección \"Actualización de seguridad para la app Armoury Crate\" en el Aviso de seguridad de ASUS para obtener más información."}],"affected":[{"source":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","affectedData":[{"vendor":"ASUS","product":"Armoury Crate","defaultStatus":"unaffected","versions":[{"version":"v5.9.9.0~v6.1.18","status":"affected"}]}]}],"metrics":{"cvssMetricV40":[{"source":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","type":"Secondary","cvssData":{"version":"4.0","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:H/VA:H/SC:L/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","baseScore":8.4,"baseSeverity":"HIGH","attackVector":"LOCAL","attackComplexity":"LOW","attackRequirements":"NONE","privilegesRequired":"LOW","userInteraction":"NONE","vulnConfidentialityImpact":"LOW","vulnIntegrityImpact":"HIGH","vulnAvailabilityImpact":"HIGH","subConfidentialityImpact":"LOW","subIntegrityImpact":"HIGH","subAvailabilityImpact":"HIGH","exploitMaturity":"NOT_DEFINED","confidentialityRequirement":"NOT_DEFINED","integrityRequirement":"NOT_DEFINED","availabilityRequirement":"NOT_DEFINED","modifiedAttackVector":"NOT_DEFINED","modifiedAttackComplexity":"NOT_DEFINED","modifiedAttackRequirements":"NOT_DEFINED","modifiedPrivilegesRequired":"NOT_DEFINED","modifiedUserInteraction":"NOT_DEFINED","modifiedVulnConfidentialityImpact":"NOT_DEFINED","modifiedVulnIntegrityImpact":"NOT_DEFINED","modifiedVulnAvailabilityImpact":"NOT_DEFINED","modifiedSubConfidentialityImpact":"NOT_DEFINED","modifiedSubIntegrityImpact":"NOT_DEFINED","modifiedSubAvailabilityImpact":"NOT_DEFINED","Safety":"NOT_DEFINED","Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","valueDensity":"NOT_DEFINED","vulnerabilityResponseEffort":"NOT_DEFINED","providerUrgency":"NOT_DEFINED"}}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-07-10T19:00:22.183144Z","id":"CVE-2025-3464","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1","type":"Secondary","description":[{"lang":"en","value":"CWE-367"}]}],"references":[{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2025-2150","source":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1"},{"url":"https://www.asus.com/content/asus-product-security-advisory/","source":"54bf65a7-a193-42d2-b1ba-8e150d3c35e1"},{"url":"https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2150","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}