Input validation

2020-03-1815:15:00

PRIOn knowledge base

www.prio-n.com

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.8%

JSON

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.

CPENameOperatorVersion
exfat_drivereq1.0.0 r14
exfat_drivereq1.0.0 r15
exfat_drivereq1.0.0 r20

Name	Operator	Version
exfat_driver	eq	1.0.0 r14
exfat_driver	eq	1.0.0 r15
exfat_driver	eq	1.0.0 r20

References

github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md

www.asustor.com/app_central/app_detail?id=776