The Indian Computer Emergency Response Team (CERT-In) has issued a critical severity warning for thousands of users across the country relying on specific Asus DSL-series WiFi routers at home and in small office setups.

The alert highlights a newly discovered authentication bypass flaw that allows remote attackers to infiltrate affected routers without user interaction, exposing entire networks to hacking attempts.

The vulnerability, tracked as CVE-2025-59367, affects three widely used router models in India: Asus DSL-AC51, DSL-N16 and DSL-AC750. According to CERT-In, the flaw enables attackers to bypass login protections and gain unrestricted access to the router interface. Once inside, a hacker could modify configuration settings, monitor internet traffic, intercept personal or financial information, or compromise connected devices.

Cybersecurity experts warn that such access can also be used to launch secondary attacks, including redirecting users to fraudulent banking pages, taking control of smart home devices or deploying scams through the compromised network. What makes the flaw particularly dangerous is that it can be exploited remotely and requires no action from the user, significantly increasing the threat for anyone still running outdated firmware.

CERT-In has advised all affected users to immediately install the latest firmware updates available on the official Asus support website. Users have also been urged to change default passwords, disable remote management features unless absolutely necessary, and review router security settings. The agency recommends monitoring router logs regularly to identify any unusual activity.

Asus has begun releasing patches for the affected models, but the government’s alert reflects a growing pattern of vulnerable networking devices becoming easy targets for cybercriminals. With millions of households and businesses across India relying on WiFi routers for work, banking, entertainment and smart home connectivity, CERT-In has stressed the importance of keeping networking hardware updated. The agency will continue monitoring the situation and issue further advisories if additional risks emerge.