high7.2
CVE-2018-11341
Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter.
Impact
Directory traversal in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to navigate the file system via the filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asustor | As6202t Firmware | through adm_3.1.0.rfq3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2018/May/2
- https://github.com/mefulton/asustorexploit
- https://www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitation
- http://seclists.org/fulldisclosure/2018/May/2
- https://github.com/mefulton/asustorexploit
- https://www.purehacking.com/blog/matthew-fulton/back-to-the-future-asustor-web-exploitation