ASUSTOR AS6202T ADM Path Traversal Vulnerability

ADM ASUSTOR Data Manager is the operating system and user interface for ASUSTOR NAS. A path traversal vulnerability exists in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3. An attacker can exploit this vulnerability to arbitrarily specify a file on the system to download via the file1 parameter...

ASUSTOR AS6202T ADM Unrestricted File Upload Vulnerability

ASUSTOR AS6202T ADM is a dedicated operating system for ASUSTOR NAS storage devices from ASUSTOR. An arbitrary file upload vulnerability exists in the importuser.cgi file in ASUSTOR AS6202T ADM version 3.1.0.RFQ3, which stems from the program's failure to validate file extensions. An attacker can...

ASUSTOR ADM has multiple vulnerabilities

ASUSTOR Data Master ADM is an operating system exclusively on ASUSTOR NAS. ASUSTOR ADM suffers from a directory traversal vulnerability, an arbitrary file upload, and a stored XSS vulnerability that can be exploited by attackers to obtain sensitive information, upload files, and perform cross-sit...