CVE-2019-11689

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

CVE-2019-11688

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...

EUVD-2019-3358

Malware in sbrugna...

ASUSTOR exFAT Driver Trust Management Issues Vulnerability

ASUSTOR exFAT Driver is an exFAT file system driver from Taiwan, China ASUSTOR. A trust management issue vulnerability exists in ASUSTOR exFAT Driver 1.0.0.r20 and prior versions. The vulnerability stems from the lack of an effective trust management mechanism in a networked system or product. An...

ASUSTOR exFAT Driver Input Validation Error Vulnerability

ASUSTOR exFAT Driver is an exFAT file system driver from Taiwan, China ASUSTOR. A security vulnerability exists in ASUSTOR exFAT Driver 1.0.0.r20 and earlier versions, which stems from exfat.cgi and exfatctl failing to properly validate the server response and passing uncleaned server responses t...

CVE-2019-11689

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

CVE-2019-11689

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

CVE-2019-11688

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...

Input validation

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...

CVE-2019-11689

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

PT-2020-9200

Name of the Vulnerable Software and Affected Versions ASUSTOR exFAT Driver versions 1.0.0.r20 and earlier Description An issue was discovered in the license validation process of the ASUSTOR exFAT Driver. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com,...

CVE-2019-11688: Improper Certificate Validation

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...

CVE-2019-11689: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...

PT-2020-9201

Name of the Vulnerable Software and Affected Versions ASUSTOR exFAT Driver versions 1.0.0.r20 and earlier Description An issue was discovered in the license validation process of the ASUSTOR exFAT Driver. The exfat.cgi and exfatctl components fail to properly validate server responses, passing...