ASUSTOR ADM OS Command Injection Vulnerability (CNVD-2018-25177)

ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the snmp.cgi file in ASUSTOR ADM version 3.1.1. The vulnerability can be exploited to execute system commands without authentication using the...

CVE-2018-12313

OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter...

Command injection

OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter...

CVE-2018-12313

OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter...

CVE-2018-12313: Improper Neutralization of Special Elements used in an OS Command

OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter...

PT-2018-11112

Name of the Vulnerable Software and Affected Versions ASUSTOR ADM version 3.1.1 Description The issue allows attackers to execute system commands without authentication. This is achieved via the rocommunity URL parameter in the snmp.cgi module. Recommendations For ASUSTOR ADM version 3.1.1,...