CVE-2018-11510

PoC ×5—

CVSS 3.0

9.8 critical

EPSS

44%p99

Published

Jun 28, 2018 (Jun 28, 2018)

Modified

Jun 17, 2026

Description

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the 'script' parameter.

Vendors: asustor
Products: adm
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (44.3%)

In the news0 stories

No ingested article mentions this CVE yet.