CVE-2019-11689 - An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20

Back Back to CVE browser

HIGH

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20

Published Mar 18, 2020

8.1

HIGH

CVSS 3.1

EPSS 3.16%

Description

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl fail to properly validate server responses and pass unsanitized text to the system shell, resulting in code execution as root.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3359
Advisory
https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
x_refsource_MISCExploitThird Party Advisory
https://www.asustor.com/app_central/app_detail?id=776
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3359		Advisory
https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md		x_refsource_MISCExploitThird Party Advisory
https://www.asustor.com/app_central/app_detail?id=776		x_refsource_MISCVendor Advisory