Asustor vulnerabilities, page 4
68 vulnerabilities
Known vulnerabilities in Asustor products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 9 products.
CriticalCVE-2023-2909asustor · admA Directory traversal vulnerability was found on EZ Sync service of ADMEZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.EPSS0.67%HighCVE-2023-2509asustor · adm +2 moreA Cross-Site Scripting(XSS) vulnerability was found on ADMAn attacker can exploit this vulnerability to inject malicious scripts into the target applications to access any cookies or sensitive information retained by the browser and used with that application. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below, LooksGood 2.0.0.R129 and below and SoundsGood 2.3.0.r1027 and below.EPSS0.34%HighCVE-2023-2749asustor · download_centerA Gain Information vulnerability was found on Download Center.Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or directories without appropriate permission restrictions. Download Center on ADM 4.0 and above will be affected. Affected products and versions include: Download Center 1.1.5.r1280 and below.EPSS0.46%HighCVE-2023-4475asustor · adm +1 moreAn Arbitrary File Movement vulnerability was found on the ADMAffected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.EPSS0.18%CriticalCVE-2023-30770asustor · admA stack-based buffer overflow vulnerability was found in the ADMAn attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.EPSS0.61%HighCVE-2023-3698asustor · adm +1 moreA Command injection vulnerability was found on Printer service of ADMPrinter service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.EPSS0.64%HighCVE-2023-3699asustor · adm +1 moreAn Improper Privilege Management vulnerability was found on the ADMAffected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.EPSS0.16%HighCVE-2023-3697asustor · adm +1 moreA Command injection vulnerability was found on Printer service of ADMPrinter service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and create files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.EPSS0.66%