PT-2020-9200

Name of the Vulnerable Software and Affected Versions ASUSTOR exFAT Driver versions 1.0.0.r20 and earlier Description An issue was discovered in the license validation process of the ASUSTOR exFAT Driver. Specifically, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com,...

CVE-2019-11688: Improper Certificate Validation

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation...

PT-2020-9201

Name of the Vulnerable Software and Affected Versions ASUSTOR exFAT Driver versions 1.0.0.r20 and earlier Description An issue was discovered in the license validation process of the ASUSTOR exFAT Driver. The exfat.cgi and exfatctl components fail to properly validate server responses, passing...

CVE-2019-11689: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root...