PT-2018-11116

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute system commands as root by modifying the name POST parameter in the group.cgi file. This enables attackers to gain elevated access and control over the system...

PT-2018-11115

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute system commands by modifying the filename parameter in the upload.cgi file. Recommendations For ASUSTOR ADM version 3.1.1, consider restricting access to the upload.cg...

PT-2018-11114

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue concerns a missing verification of a password, allowing attackers to change account passwords without entering the current password. Recommendations For ASUSTOR ADM version 3.1.1, update to a...

PT-2018-11107

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to upload files to arbitrary locations by modifying the path URL parameter in the upload.cgi. This can potentially lead to unauthorized access and modification of sensitive files...

PT-2018-11109

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue concerns cross-site scripting in the Login page, specifically via the System Announcement feature, allowing attackers to execute JavaScript. Recommendations For ASUSTOR ADM version 3.1.1, conside...

CVE-2018-12310: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature...

CVE-2018-12319: Improper Neutralization of Input During Web Page Generation

Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from signing in by placing malformed text in the title...

CVE-2018-12309: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files to arbitrary locations by modifying the "path" URL parameter. NOTE: the "filename" POST parameter is covered by CVE-2018-11345...

PT-2018-11106

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to obtain the encryption key via the encrypt key variable in the share.cgi API endpoint. Recommendations For ASUSTOR ADM version 3.1.1, avoid using the encrypt key variable in th...

PT-2018-11103

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript, specifically through cross-site scripting in File Explorer. Recommendations For ASUSTOR ADM version 3.1.1,...

CVE-2018-12306: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to CVE-2018-11344...

CVE-2018-2478

An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the adm user. The commands executed depen...

CVE-2018-2478: Undefined Security Weakness

An attacker can use specially crafted inputs to execute commands on the host of a TREX / BWA installation, SAP Basis, versions: 7.0 to 7.02, 7.10 to 7.11, 7.30, 7.31, 7.40 and 7.50 to 7.53. Not all commands are possible, only those that can be executed by the adm user. The commands executed depen...

ASUSTOR ADM 3.1 scope SQL Injection

SQL Injection vulnerability in ASUSTOR ADM scope parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ADM fails to upgrade ADC in HA -- DEVICE_NOT_REACHABLE

ADM logs:- Error Config8 https://x.x.x.x/nitro/v1/config/nshostname?format=json, Reason: Exception: DEVICENOTREACHABLE Debug Config8 NetScaler x.x..x.xStill rebooting.. Error Config8 DeviceRebootStatus: Reboot Failed for NS x.x.x.x This is how it would appea on ADM When you login to ADC we can...

Citrix ADM does not detect VPX's of SDX after SDX is upgraded from 11.0 to 11.1 and higher versions

We see all the VPX instances on ADM before the upgrade. After SDX is upgraded from 11.0 to 11.1 or a higher version, all the VPX's of the SDX disappear from Citrix ADM. All the config related to those VPX's are lost too. This includes licensed vServers and User Group entities bound to that VPX on...

CVE-2018-16752

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

CVE-2018-16752

The LINK-NET LW-N605R device, running firmware 12.20.2.1486 , is vulnerable to Remote Code Execution (RCE) . The flaw exists in the ping feature located at adm/systools.asp, where shell metacharacters in the HOST field are not properly neutralized, allowing for command injection. While authentica...

CVE-2018-16752: Improper Neutralization of Special Elements used in an OS Command

LINK-NET LW-N605R devices with firmware 12.20.2.1486 allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at adm/systools.asp. Authentication is needed but the default password of admin for the admin account may be used in some cases...

LW-N605R Remote Code Execution

''' Title: LW-N605R - Remote Code Execution Author: Nassim Asrir Contact: [email protected] | https://www.linkedin.com/in/nassim-asrir-b73a57122/ Vendor: LINK-NET Description: LW-N605R devices allow Remote Code Execution via shell metacharacters in the HOST field of the ping feature at...