CVE-2018-11510

CRITICAL 9.8CVE-2018-11510 · Published 28/06/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
adm asustor	`≤ 3.1.2.rhg1`	No fix yet

Description

The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the 'script' parameter.

References

packetstormsecurity.com/files/148919/ASUSTOR-NAS-ADM-3.1.0-Remote-Command-Execution-SQL-Injection.html · Exploit
mefulton/CVE-2018-11510 · Exploit
mefulton/CVE-2018-11510 · Exploit
exploit-db.com/exploits/45200 · Exploit
exploit-db.com/exploits/45212 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free