Advisories · Technology
ASUSTOR ADM.
Every CVE that names ASUSTOR ADM among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.2 CriticalCritical · CVSS 9+
A path traversal vulnerability was found in the FTP Backup on the ADM.
- ASUSTOR ADM
- Path traversal
- CVSS 8.3 High
An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 9.5 CriticalCritical · CVSS 9+
An improper input validation vulnerability was found in ADM while joining a AD Domain.
- ASUSTOR ADM
- CWE-20
- CVSS 6.3 Medium
An improper certificate validation vulnerability was found in a third-party NAT traversal module.
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 6.3 Medium
An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 8.9 High
An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 8.9 High
An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 7.0 High
A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 7.0 High
An improper certificates validation vulnerability was found in the Notification settings of ADM
- ASUSTOR ADM
- Weak cryptography or TLS
- CVSS 7.1 High
An improper access control vulnerability was found in the EZ Sync Manager of ADM
- ASUSTOR ADM
- Authentication bypass
- CVSS 4.8 Medium
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
- ASUSTOR ADM
- Cross-site scripting (XSS)
- CVSS 4.8 Medium
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
- ASUSTOR ADM
- Cross-site scripting (XSS)
- CVSS 5.2 Medium
A security bypass vulnerability was found in DataSync Center installed on ADM
- ASUSTOR ADM
- Cross-site request forgery (CSRF)
- CVSS 6.0 Medium
An improper input validation vulnerability was found on manipulating configuration of ADM
- ASUSTOR ADM
- CWE-20
- CVSS 7.5 High
An Arbitrary File Movement vulnerability was found on the ADM
- ASUSTOR ADM
- Information disclosure
- CVSS 8.7 High
An Improper Privilege Management vulnerability was found on the ADM
- ASUSTOR ADM
- Privilege escalation
- CVSS 8.5 High
A Command injection vulnerability was found on Printer service of ADM
- ASUSTOR ADM
- Path traversal
- CVSS 8.5 High
A Command injection vulnerability was found on Printer service of ADM
- ASUSTOR ADM
- Path traversal
- CVSS 8.8 High
A Command injection vulnerability was found on Printer service of ADM
- ASUSTOR ADM
- Command injection
- CVSS 8.5 High
A Directory traversal vulnerability was found on EZ Sync service of ADM
- ASUSTOR ADM
- Path traversal
- CVSS 7.1 High
A Cross-Site Scripting(XSS) vulnerability was found on ADM
- ASUSTOR ADM
- ASUSTOR LooksGood
- Cross-site scripting (XSS)
- CVSS 7.1 High
A stack-based buffer overflow vulnerability was found in the ADM
- ASUSTOR ADM
- Memory corruption
- CVSS 7.1 High
A stack-based buffer overflow vulnerability was found on ADM
- ASUSTOR ADM
- Memory corruption