ZeroHour

CVE-2018-12316

PoC
CVSS 3.0
8.8 high
EPSS
3%p88
Published
()
Modified
Description

OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter.

Vendors
asustor
Products
data master
Weakness
CWE-78
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.