CVE-2019-11688

Опубликовано: 18 мар. 2020

Источник: nvd

CVSS3: 7.4

CVSS2: 8.8

EPSS Низкий

Описание

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.

Ссылки

https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
Exploit
Third Party Advisory
https://www.asustor.com/app_central/app_detail?id=776
Vendor Advisory
https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
Exploit
Third Party Advisory
https://www.asustor.com/app_central/app_detail?id=776
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:asustor:exfat_driver:1.0.0:r14:*:*:*:*:*:*

cpe:2.3:a:asustor:exfat_driver:1.0.0:r15:*:*:*:*:*:*

cpe:2.3:a:asustor:exfat_driver:1.0.0:r20:*:*:*:*:*:*

EPSS

Процентиль: 60%

0.00391

Низкий

7.4 High

CVSS3

8.8 High

CVSS2

Дефекты

CWE-295

Связанные уязвимости

GHSA-rwrg-27qq-qm5g

github

больше 3 лет назад