Vulnerabilities

An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system.

The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-based inter-process communication (IPC) mechanism protected by AES encryption.

A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM.

A path traversal vulnerability was found in the IHM Log handling of ADM.

A path traversal vulnerability was found in the Wallpaper component of ADM.

A path traversal vulnerability was found in the VPN Clients on the ADM.

A format string vulnerability was found in the Notification OAuth settings of ADM.

A format string vulnerability was found in the Rsync Backup on the ADM.

A format string vulnerability was found in the Internal Backup on the ADM.

A stored format string vulnerability was found in the FTP Backup on the ADM.

A command injection vulnerability was found in the PPTP VPN Clients on the ADM.

A stack-based buffer overflow vulnerability was found in the VPN Clients on the ADM.

The FTP Backup on the ADM does not properly sanitize filenames received from the FTP server when parsing directory listings.

The FTP Backup on the ADM will not properly strictly enforce TLS certificate verification while connecting to an FTP server using FTPES/FTPS.

When a specific function is enabled while joining a AD Domain from ADM, an improper input parameters validation vulnerability in a specific CGI program allowing an unauthenticated remote attacker to write arbitrary data…

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server.

The DDNS function uses an insecure HTTP connection or fails to validate the SSL/TLS certificate when querying an external server for the device's WAN IP address.

The API communication component fails to validate the SSL/TLS certificate when sending HTTPS requests to the server.

The DDNS update function in ADM fails to properly validate the hostname of the DDNS server's TLS/SSL certificate.

When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic between the client and server can perform a ma…

When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server…

When the service of ABP and AES is installed in a directory writable by non-administrative users, an attacker can replace or plant a DLL with the same name as one loaded by the service.

The Windows service configuration of ABP and AES contains an unquoted ImagePath registry value vulnerability.

An improper access control vulnerability was found in the EZ Sync Manager of ADM, which allows authenticated users to copy arbitrary files from the server file system into their own EZSync folder.

A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM.