ASUSTOR

Records71All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high38CVSS 7.0–8.9

Exploited now

ASUSTOR records in CISA KEV

No ASUSTOR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Data Master 45 records HIGH As6202t Firmware 6 records MEDIUM Adm 5 records HIGH Asustor Data Master 2 records MEDIUM Exfat Driver 2 records MEDIUM Soundsgood 2 records LOW Download Center 1 record MEDIUM Looksgood 1 record LOW

Records

2 records in Asustor Data Master · all components

TI-2018-08229 CVE-2018-11509 · GHSA-wqjr-3h8v-rgjg

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does…

MEDIUM 56

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are installed from the online repository.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.12418 Published 2018-08-16 No fix listed CWE-798

TI-2018-08231 CVE-2018-11511 · GHSA-8ccp-76j3-r8wf

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3…

MEDIUM 55

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/album/tree_lists/ URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11126 Published 2018-08-16 No fix listed CWE-89

Open these records in search →

Critical	12
High	38
Medium	21
Low	0
No CVSS	0