ASUSTOR

Records71All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high38CVSS 7.0–8.9

Exploited now

ASUSTOR records in CISA KEV

No ASUSTOR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Data Master 45 records HIGH As6202t Firmware 6 records MEDIUM Adm 5 records HIGH Asustor Data Master 2 records MEDIUM Exfat Driver 2 records MEDIUM Soundsgood 2 records LOW Download Center 1 record MEDIUM Looksgood 1 record LOW

Records

5 records in Adm · all components

TI-2018-08230 CVE-2018-11510 · GHSA-r3m4-x4g8-pm2w

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code…

HIGH 71

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the 'script' parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.43659 Published 2018-06-28 No fix listed CWE-78

TI-2023-02727 CVE-2023-2909 · GHSA-28mp-g2wm-23p3

A Directory traversal vulnerability was found on EZ Sync service of ADM

MEDIUM 44

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00673 Published 2023-05-31 No fix listed CWE-22

TI-2023-14583 CVE-2023-30770 · GHSA-gh84-757g-2vhr

A stack-based buffer overflow vulnerability was found in the ADM

MEDIUM 43

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00614 Published 2023-04-17 No fix listed CWE-787

TI-2022-17472 CVE-2022-37398 · GHSA-p489-wgjc-48gr

A stack-based buffer overflow vulnerability was found on ADM

LOW 39

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00725 Published 2022-08-05 No fix listed CWE-121

TI-2023-02353 CVE-2023-2509 · GHSA-69cg-q6pw-v79j

Cross-site scripting in ASUSTOR ADM

LOW 33

A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00338 Published 2023-05-17 No fix listed CWE-79

Open these records in search →