CVE-2018-11344

2018-05-2201:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.0%

JSON

A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter.

References

seclists.org/fulldisclosure/2018/May/2

github.com/mefulton/asustorexploit

www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitation