Записи ASUSTOR
62 опубликованных записей вендора asustor.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 5
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Повторяющиеся классы
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')15
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')8
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-295 Improper Certificate Validation7
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor6
- CWE-134 Use of Externally-Controlled Format String4
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
62 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
52В плане | CVE-2018-11510Proof of concept | The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgasustor · adm · CWE-78 | Критическая9,8 | — | 44,3 % | 28 июн. 2018 г. |
43В плане | CVE-2018-11509Proof of concept | ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are instalasustor · asustor data master · CWE-798 | Критическая9,8 | — | 12,4 % | 16 авг. 2018 г. |
42В плане | CVE-2018-11511Proof of concept | The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'aasustor · asustor data master · CWE-89 | Критическая9,8 | — | 11,1 % | 16 авг. 2018 г. |
40В плане | CVE-2018-12313Эксплойта нет | OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "roasustor · data master · CWE-78 | Критическая9,8 | — | 4,3 % | 4 дек. 2018 г. |
40В плане | CVE-2023-2909Эксплойта нет | A Directory traversal vulnerability was found on EZ Sync service of ADMasustor · adm · CWE-22 | Критическая10,0 | — | 0,6 % | 31 мая 2023 г. |
39Наблюдать | CVE-2023-30770Эксплойта нет | A stack-based buffer overflow vulnerability was found in the ADMasustor · adm · CWE-787 | Критическая9,8 | — | 0,6 % | 17 апр. 2023 г. |
38Наблюдать | CVE-2026-6644Proof of concept | A command injection vulnerability was found in the PPTP VPN Clients on the ADMasustor · data master · CWE-78 | Критическая9,4 | — | 2,0 % | 20 апр. 2026 г. |
38Наблюдать | CVE-2026-24936Эксплойта нет | An improper input validation vulnerability was found in ADM while joining a AD Domain.asustor · data master · CWE-20 | Критическая9,5 | — | 0,8 % | 3 февр. 2026 г. |
36Наблюдать | CVE-2018-12307Эксплойта нет | OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameasustor · data master · CWE-78 | Высокая8,8 | — | 3,4 % | 4 дек. 2018 г. |
36Наблюдать | CVE-2018-12317Эксплойта нет | OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" Pasustor · data master · CWE-78 | Высокая8,8 | — | 3,4 % | 4 дек. 2018 г. |
36Наблюдать | CVE-2018-12316Эксплойта нет | OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST pasustor · data master · CWE-78 | Высокая8,8 | — | 3,4 % | 4 дек. 2018 г. |
36Наблюдать | CVE-2018-12312Эксплойта нет | OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL pasustor · data master · CWE-78 | Высокая8,8 | — | 3,4 % | 4 дек. 2018 г. |
36Наблюдать | CVE-2018-11345Эксплойта нет | An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the Pasustor · as6202t firmware · CWE-434 | Высокая8,8 | — | 1,8 % | 21 мая 2018 г. |
36Наблюдать | CVE-2026-3179Эксплойта нет | A path traversal vulnerability was found in the FTP Backup on the ADM.asustor · data master · CWE-22 | Критическая9,2 | — | 0,7 % | 25 февр. 2026 г. |
35Наблюдать | CVE-2023-2910Эксплойта нет | A Command injection vulnerability was found on Printer service of ADMasustor · data master · CWE-77 | Высокая8,8 | — | 1,5 % | 17 авг. 2023 г. |
35Наблюдать | CVE-2018-12318Эксплойта нет | Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to obtain the SNMP password in cleartext.asustor · data master · CWE-200 | Высокая8,8 | — | 1,1 % | 4 дек. 2018 г. |
35Наблюдать | CVE-2022-37398Эксплойта нет | A stack-based buffer overflow vulnerability was found on ADMasustor · adm · CWE-121 | Высокая8,8 | — | 0,7 % | 5 авг. 2022 г. |
35Наблюдать | CVE-2023-3697Эксплойта нет | A Command injection vulnerability was found on Printer service of ADMasustor · data master · CWE-22 | Высокая8,8 | — | 0,6 % | 17 авг. 2023 г. |
35Наблюдать | CVE-2026-24932Эксплойта нет | An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.asustor · data master · CWE-295 | Высокая8,9 | — | 0,2 % | 2 февр. 2026 г. |
35Наблюдать | CVE-2026-24933Эксплойта нет | An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.asustor · data master · CWE-295 | Высокая8,9 | — | 0,2 % | 2 февр. 2026 г. |
34Наблюдать | CVE-2026-6643Proof of concept | A stack-based buffer overflow vulnerability in the VPN Clients on the ADMasustor · data master · CWE-121 | Высокая8,6 | — | 0,7 % | 20 апр. 2026 г. |
34Наблюдать | CVE-2026-67244Эксплойта нет | A format string vulnerability was found in the Notification OAuth settings of ADMasustor · data master · CWE-134 | Высокая8,6 | — | 0,4 % | 29 июл. 2026 г. |
34Наблюдать | CVE-2026-67248Эксплойта нет | A stack-based buffer overflow vulnerability was found in the File Explorer on the ADMasustor · data master · CWE-121 | Высокая8,7 | — | 0,4 % | 30 июл. 2026 г. |
33Наблюдать | CVE-2019-11689Эксплойта нет | An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20.asustor · exfat driver · CWE-78 | Высокая8,1 | — | 3,1 % | 18 мар. 2020 г. |
33Наблюдать | CVE-2026-3100Эксплойта нет | An improper certificate validation vulnerability was found in the FTP Backup on the ADM.asustor · data master · CWE-295 | Высокая8,3 | — | 0,2 % | 25 февр. 2026 г. |
- CVE-2018-1151052В плане
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cg
КритическаяCVSS 9,8Proof of conceptEPSS 44 %asustor · adm28 июн. 2018 г.
- CVE-2018-1150943В плане
ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are instal
КритическаяCVSS 9,8Proof of conceptEPSS 12 %asustor · asustor data master16 авг. 2018 г.
- CVE-2018-1151142В плане
The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'a
КритическаяCVSS 9,8Proof of conceptEPSS 11 %asustor · asustor data master16 авг. 2018 г.
- CVE-2018-1231340В плане
OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "ro
КритическаяCVSS 9,8Эксплойта нетEPSS 4 %asustor · data master4 дек. 2018 г.
- CVE-2023-290940В плане
A Directory traversal vulnerability was found on EZ Sync service of ADM
КритическаяCVSS 10,0Эксплойта нетEPSS 0 %asustor · adm31 мая 2023 г.
- CVE-2023-3077039Наблюдать
A stack-based buffer overflow vulnerability was found in the ADM
КритическаяCVSS 9,8Эксплойта нетEPSS 0 %asustor · adm17 апр. 2023 г.
- CVE-2026-664438Наблюдать
A command injection vulnerability was found in the PPTP VPN Clients on the ADM
КритическаяCVSS 9,4Proof of conceptEPSS 2 %asustor · data master20 апр. 2026 г.
- CVE-2026-2493638Наблюдать
An improper input validation vulnerability was found in ADM while joining a AD Domain.
КритическаяCVSS 9,5Эксплойта нетEPSS 0 %asustor · data master3 февр. 2026 г.
- CVE-2018-1230736Наблюдать
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parame
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %asustor · data master4 дек. 2018 г.
- CVE-2018-1231736Наблюдать
OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" P
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %asustor · data master4 дек. 2018 г.
- CVE-2018-1231636Наблюдать
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST p
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %asustor · data master4 дек. 2018 г.
- CVE-2018-1231236Наблюдать
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL p
ВысокаяCVSS 8,8Эксплойта нетEPSS 3 %asustor · data master4 дек. 2018 г.
- CVE-2018-1134536Наблюдать
An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the P
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %asustor · as6202t firmware21 мая 2018 г.
- CVE-2026-317936Наблюдать
A path traversal vulnerability was found in the FTP Backup on the ADM.
КритическаяCVSS 9,2Эксплойта нетEPSS 0 %asustor · data master25 февр. 2026 г.
- CVE-2023-291035Наблюдать
A Command injection vulnerability was found on Printer service of ADM
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %asustor · data master17 авг. 2023 г.
- CVE-2018-1231835Наблюдать
Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to obtain the SNMP password in cleartext.
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %asustor · data master4 дек. 2018 г.
- CVE-2022-3739835Наблюдать
A stack-based buffer overflow vulnerability was found on ADM
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %asustor · adm5 авг. 2022 г.
- CVE-2023-369735Наблюдать
A Command injection vulnerability was found on Printer service of ADM
ВысокаяCVSS 8,8Эксплойта нетEPSS 0 %asustor · data master17 авг. 2023 г.
- CVE-2026-2493235Наблюдать
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
ВысокаяCVSS 8,9Эксплойта нетEPSS 0 %asustor · data master2 февр. 2026 г.
- CVE-2026-2493335Наблюдать
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
ВысокаяCVSS 8,9Эксплойта нетEPSS 0 %asustor · data master2 февр. 2026 г.
- CVE-2026-664334Наблюдать
A stack-based buffer overflow vulnerability in the VPN Clients on the ADM
ВысокаяCVSS 8,6Proof of conceptEPSS 0 %asustor · data master20 апр. 2026 г.
- CVE-2026-6724434Наблюдать
A format string vulnerability was found in the Notification OAuth settings of ADM
ВысокаяCVSS 8,6Эксплойта нетEPSS 0 %asustor · data master29 июл. 2026 г.
- CVE-2026-6724834Наблюдать
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM
ВысокаяCVSS 8,7Эксплойта нетEPSS 0 %asustor · data master30 июл. 2026 г.
- CVE-2019-1168933Наблюдать
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20.
ВысокаяCVSS 8,1Эксплойта нетEPSS 3 %asustor · exfat driver18 мар. 2020 г.
- CVE-2026-310033Наблюдать
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
ВысокаяCVSS 8,3Эксплойта нетEPSS 0 %asustor · data master25 февр. 2026 г.