İçeriğe atla
Noroxi

ASUSTOR kayıtları

asustor üreticisine ait 62 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
5
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 20
  3. 22
  4. 23
  5. 25
  6. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

62 kayıt
  • CVE-2018-11510
    52Planlayın

    The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cg

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    asustor · adm28 Haz 2018

  • CVE-2018-11509
    43Planlayın

    ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are instal

    KritikCVSS 9,8Kavram kanıtıEPSS %13

    asustor · asustor data master16 Ağu 2018

  • CVE-2018-11511
    42Planlayın

    The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'a

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    asustor · asustor data master16 Ağu 2018

  • CVE-2018-12313
    40Planlayın

    OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "ro

    KritikCVSS 9,8İstismar yokEPSS %4

    asustor · data master4 Ara 2018

  • CVE-2023-2909
    40Planlayın

    A Directory traversal vulnerability was found on EZ Sync service of ADM

    KritikCVSS 10,0İstismar yokEPSS %1

    asustor · adm31 May 2023

  • CVE-2023-30770
    39İzleyin

    A stack-based buffer overflow vulnerability was found in the ADM

    KritikCVSS 9,8İstismar yokEPSS %1

    asustor · adm17 Nis 2023

  • CVE-2026-6644
    38İzleyin

    A command injection vulnerability was found in the PPTP VPN Clients on the ADM

    KritikCVSS 9,4Kavram kanıtıEPSS %2

    asustor · data master20 Nis 2026

  • CVE-2026-24936
    38İzleyin

    An improper input validation vulnerability was found in ADM while joining a AD Domain.

    KritikCVSS 9,5İstismar yokEPSS %1

    asustor · data master3 Şub 2026

  • CVE-2018-12307
    36İzleyin

    OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parame

    YüksekCVSS 8,8İstismar yokEPSS %3

    asustor · data master4 Ara 2018

  • CVE-2018-12317
    36İzleyin

    OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" P

    YüksekCVSS 8,8İstismar yokEPSS %3

    asustor · data master4 Ara 2018

  • CVE-2018-12316
    36İzleyin

    OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST p

    YüksekCVSS 8,8İstismar yokEPSS %3

    asustor · data master4 Ara 2018

  • CVE-2018-12312
    36İzleyin

    OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL p

    YüksekCVSS 8,8İstismar yokEPSS %3

    asustor · data master4 Ara 2018

  • CVE-2018-11345
    36İzleyin

    An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the P

    YüksekCVSS 8,8İstismar yokEPSS %2

    asustor · as6202t firmware21 May 2018

  • CVE-2026-3179
    36İzleyin

    A path traversal vulnerability was found in the FTP Backup on the ADM.

    KritikCVSS 9,2İstismar yokEPSS %1

    asustor · data master25 Şub 2026

  • CVE-2023-2910
    35İzleyin

    A Command injection vulnerability was found on Printer service of ADM

    YüksekCVSS 8,8İstismar yokEPSS %2

    asustor · data master17 Ağu 2023

  • CVE-2018-12318
    35İzleyin

    Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to obtain the SNMP password in cleartext.

    YüksekCVSS 8,8İstismar yokEPSS %1

    asustor · data master4 Ara 2018

  • CVE-2022-37398
    35İzleyin

    A stack-based buffer overflow vulnerability was found on ADM

    YüksekCVSS 8,8İstismar yokEPSS %1

    asustor · adm5 Ağu 2022

  • CVE-2023-3697
    35İzleyin

    A Command injection vulnerability was found on Printer service of ADM

    YüksekCVSS 8,8İstismar yokEPSS %1

    asustor · data master17 Ağu 2023

  • CVE-2026-24932
    35İzleyin

    An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.

    YüksekCVSS 8,9İstismar yokEPSS %0

    asustor · data master2 Şub 2026

  • CVE-2026-24933
    35İzleyin

    An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.

    YüksekCVSS 8,9İstismar yokEPSS %0

    asustor · data master2 Şub 2026

  • CVE-2026-6643
    34İzleyin

    A stack-based buffer overflow vulnerability in the VPN Clients on the ADM

    YüksekCVSS 8,6Kavram kanıtıEPSS %1

    asustor · data master20 Nis 2026

  • CVE-2026-67244
    34İzleyin

    A format string vulnerability was found in the Notification OAuth settings of ADM

    YüksekCVSS 8,6İstismar yokEPSS %0

    asustor · data master29 Tem 2026

  • CVE-2026-67248
    34İzleyin

    A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM

    YüksekCVSS 8,7İstismar yokEPSS %0

    asustor · data master30 Tem 2026

  • CVE-2019-11689
    33İzleyin

    An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20.

    YüksekCVSS 8,1İstismar yokEPSS %3

    asustor · exfat driver18 Mar 2020

  • CVE-2026-3100
    33İzleyin

    An improper certificate validation vulnerability was found in the FTP Backup on the ADM.

    YüksekCVSS 8,3İstismar yokEPSS %0

    asustor · data master25 Şub 2026