Login Request a demo
AS
Vendor
Asustor
8 products with CVEs on record
73
CVEs
0
On KEV
0
New 30D
Products
DM
Data Master
Asustor
9.9
45 CVEs0 on KEV0 new
AD
ADM
ASUSTOR
10.0
14 CVEs0 on KEV0 new
AF
As6202t Firmware
Asustor
8.8
6 CVEs0 on KEV0 new
AD
Asustor Data Master
Asustor
9.8
2 CVEs0 on KEV0 new
ED
Exfat Driver
Asustor
8.1
2 CVEs0 on KEV0 new
SO
Soundsgood
Asustor
6.1
2 CVEs0 on KEV0 new
DC
Download Center
Asustor
7.5
1 CVEs0 on KEV0 new
LO
Looksgood
Asustor
6.1
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-67248
DM
Data Master
Asustor
8.8
0%
Jul 30A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM
CVE-2026-67247
DM
Data Master
Asustor
6.5
0%
Jul 30A path traversal vulnerability was found in the IHM Log handling of ADM
CVE-2026-67246
DM
Data Master
Asustor
6.5
0%
Jul 30A path traversal vulnerability was found in the Wallpaper component of ADM
CVE-2026-67245
DM
Data Master
Asustor
8.1
0%
Jul 30A path traversal vulnerability was found in the VPN Clients on the ADM
CVE-2026-67244
DM
Data Master
Asustor
7.2
0%
Jul 30A format string vulnerability was found in the Notification OAuth settings of ADM
CVE-2026-18188
DM
Data Master
Asustor
8.1
0%
Jul 30A format string vulnerability was found in the Rsync Backup on the ADM
CVE-2026-18187
DM
Data Master
Asustor
8.1
0%
Jul 30A format string vulnerability was found in the Internal Backup on the ADM
CVE-2026-18186
DM
Data Master
Asustor
8.1
0%
Jul 30A stored format string vulnerability was found in the FTP Backup on the ADM
CVE-2026-6644
DM
Data Master
Asustor
9.1
2%
Apr 20A command injection vulnerability was found in the PPTP VPN Clients on the ADM
CVE-2026-6643
DM
Data Master
Asustor
9.9
0%
Apr 20A stack-based buffer overflow vulnerability in the VPN Clients on the ADM
CVE-2026-3179
AD
ADM
ASUSTOR
8.1
1%
Feb 25A path traversal vulnerability was found in the FTP Backup on the ADM.
CVE-2026-3100
AD
ADM
ASUSTOR
6.5
0%
Feb 25An improper certificate validation vulnerability was found in the FTP Backup on the ADM.
CVE-2026-24936
AD
ADM
ASUSTOR
9.8
1%
Feb 3An improper input validation vulnerability was found in ADM while joining a AD Domain.
CVE-2026-24935
AD
ADM
ASUSTOR
5.6
0%
Feb 3An improper certificate validation vulnerability was found in a third-party NAT traversal module.
CVE-2026-24934
AD
ADM
ASUSTOR
3.7
0%
Feb 3An improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.
CVE-2026-24933
AD
ADM
ASUSTOR
5.9
0%
Feb 3An improper certificate validation vulnerability was found in ADM while sending HTTPS requests to the server.
CVE-2026-24932
AD
ADM
ASUSTOR
5.9
0%
Feb 3An improper certificate validation vulnerability was found in ADM while updating the DDNS settings.
CVE-2025-13053
AD
ADM
ASUSTOR
3.7
0%
Dec 12A missing encryption of sensitive data vulnerability was found in the UPS settings of ADM
CVE-2025-13052
AD
ADM
ASUSTOR
5.9
0%
Dec 12An improper certificates validation vulnerability was found in the Notification settings of ADM
CVE-2025-13051
AA
ABP and AES
ASUSTOR
9.3
0%
Nov 19Windows service used an uncontrolled search path element will cause unauthorized code execution with localsystem privileges
CVE-2023-4475
DM
Data Master
Asustor
5.5
0%
Aug 22An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories
CVE-2023-3699
DM
Data Master
Asustor
5.5
0%
Aug 22An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices configuration
CVE-2023-3698
DM
Data Master
Asustor
8.1
1%
Aug 17Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files
CVE-2023-3697
DM
Data Master
Asustor
8.8
1%
Aug 17Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and create files
CVE-2023-2910
DM
Data Master
Asustor
8.8
2%
Aug 17Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Printer service functionality in ASUSTOR Data Master (ADM) allows remote…
CVE-2023-2909
AD
Adm
Asustor
10.0
1%
May 31EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files
CVE-2023-2749
DC
Download Center
Asustor
7.5
0%
May 31Download Center fails to properly validate the file path submitted by a user, An attacker can exploit this vulnerability to gain unauthorized access to sensitive files or…
CVE-2023-2509
AD
Adm
Asustor
6.1
0%
May 17A Cross-Site Scripting(XSS) vulnerability was found on ADM, LooksGood and SoundsGood Apps
CVE-2023-30770
AD
Adm
Asustor
9.8
1%
Apr 17A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation
CVE-2022-37398
AD
ADM
ASUSTOR
8.8
1%
Aug 5A stack-based buffer overflow vulnerability was found on ADM
CVE-2019-11689
ED
Exfat Driver
Asustor
8.1
3%
Mar 18An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20
CVE-2019-11688
ED
Exfat Driver
Asustor
7.4
1%
Mar 18An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20
CVE-2018-12319
DM
Data Master
Asustor
7.5
1%
Dec 4Denial-of-service in the login page of ASUSTOR ADM 3.1.1 allows attackers to prevent users from signing in by placing malformed text in the title
CVE-2018-12318
DM
Data Master
Asustor
8.8
1%
Dec 4Information disclosure in the SNMP settings page in ASUSTOR ADM version 3.1.1 allows attackers to obtain the SNMP password in cleartext
CVE-2018-12317
DM
Data Master
Asustor
8.8
3%
Dec 4OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" POST parameter
CVE-2018-12316
DM
Data Master
Asustor
8.8
3%
Dec 4OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter
CVE-2018-12315
DM
Data Master
Asustor
6.5
1%
Dec 4Missing verification of a password in ASUSTOR ADM version 3.1.1 allows attackers to change account passwords without entering the current password
CVE-2018-12314
DM
Data Master
Asustor
7.5
2%
Dec 4Directory Traversal in downloadwallpaper.cgi in ASUSTOR ADM version 3.1.1 allows attackers to download arbitrary files by manipulating the "file" and "folder" URL parameters
CVE-2018-12313
DM
Data Master
Asustor
9.8
4%
Dec 4OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter
CVE-2018-12312
DM
Data Master
Asustor
8.8
3%
Dec 4OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secret_key" URL parameter
CVE-2018-12311
DM
Data Master
Asustor
5.4
1%
Dec 4Cross-site scripting vulnerability in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute arbitrary JavaScript when a file is moved via a malicious filename
CVE-2018-12310
DM
Data Master
Asustor
5.4
1%
Dec 4Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature
CVE-2018-12309
DM
Data Master
Asustor
7.5
2%
Dec 4Directory Traversal in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to upload files to arbitrary locations by modifying the "path" URL parameter
CVE-2018-12308
DM
Data Master
Asustor
6.5
1%
Dec 4Encryption key disclosure in share.cgi in ASUSTOR ADM version 3.1.1 allows attackers to obtain the encryption key via the "encrypt_key" URL parameter
CVE-2018-12307
DM
Data Master
Asustor
8.8
3%
Dec 4OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameter
CVE-2018-12306
DM
Data Master
Asustor
7.5
2%
Dec 4Directory Traversal in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to view arbitrary files by modifying the "file1" URL parameter, a similar issue to…
CVE-2018-12305
DM
Data Master
Asustor
6.1
1%
Dec 4Cross-site scripting in File Explorer in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript by uploading SVG images with embedded JavaScript
CVE-2018-15699
DM
Data Master
Asustor
6.1
1%
Aug 27ASUSTOR Data Master 3.1.5 and below makes an HTTP request for a configuration file that is vulnerable to XSS
CVE-2018-15698
DM
Data Master
Asustor
6.5
1%
Aug 27ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on the file system when providing the full path to loginimage.cgi
CVE-2018-15697
DM
Data Master
Asustor
6.5
1%
Aug 27ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to read any file on a share by providing the full path
CVE-2018-15696
DM
Data Master
Asustor
4.3
1%
Aug 27ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to enumerate all user accounts via user.cgi
CVE-2018-15695
DM
Data Master
Asustor
6.5
1%
Aug 27ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in…
CVE-2018-15694
DM
Data Master
Asustor
7.5
2%
Aug 27ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnerability
CVE-2018-11511
AD
Asustor Data Master
Asustor
9.8
11%
Aug 16The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a…
CVE-2018-11509
AD
Asustor Data Master
Asustor
9.8
12%
Aug 16ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are installed from the online repository
CVE-2018-11510
AD
Adm
Asustor
9.8
44%
Jun 28The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the…
CVE-2018-11346
AF
As6202t Firmware
Asustor
4.3
1%
May 22An insecure direct object reference vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows the ability to reference the "download_sys_settings" action and then…
CVE-2018-11345
AF
As6202t Firmware
Asustor
8.8
2%
May 22An unrestricted file upload vulnerability in upload.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data via the POST parameter filename
CVE-2018-11344
AF
As6202t Firmware
Asustor
6.5
1%
May 22A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter
CVE-2018-11343
SO
Soundsgood
Asustor
5.4
1%
May 22A persistent cross site scripting vulnerability in playlistmanger.cgi in the ASUSTOR SoundsGood application allows attackers to store cross site scripting payloads via the…