This vulnerability allows a remote, authenticated attacker to read DDNS credentials that are improperly written to the system log of certain ASUS routers. By exploiting the logging flaw, an attacker can retrieve sensitive authentication data, which may then be used to modify DNS settings or redirect traffic, thereby facilitating further compromise or denial-of-service activity.

The flaw affects ASUS routers running firmware versions 3.0.0.4.386_series, 3.0.0.4.388_series, and 3.0.0.6.102_series. These models are identified by the corresponding CPE entries for ASUS router series listed in the advisory.

The CVSS score of 8.4 indicates a high severity classification, and although the EPSS score is not available, the vulnerability is not listed in the CISA KEV catalog. The attack requires remote authentication, meaning the attacker must first gain legitimate credentials or otherwise authenticate to the router. Once authenticated, the attacker can trigger the logging mechanism and retrieve the credentials with relative ease, exposing a clear path to compromise DNS configuration and potentially breach the network.