Vulnerabilities in ASUSTOR

26 results
Vexday analysis

ASUSTOR apresenta 26 vulnerabilidades catalogadas, das quais 4 são críticas; nenhuma está sob exploração ativa conhecida no momento. A fraqueza predominante é CWE-295 (validação inadequada de certificados SSL/TLS), indicando falhas recorrentes em segurança de comunicações. Com nenhuma divulgação nos últimos 90 dias, o risco atual é estável, mas a natureza das falhas sugere atenção contínua aos processos de validação criptográfica nos produtos da marca.

CVE-2026-24934MEDIUMAn improper certificate validation vulnerability was found in ADM while querying an external server for the device's WAN IP address.EPSS 0.2%CVE-2025-8070CRITICALWindows service registered with an unquoted ImagePath vulnerability in the system registryEPSS 0.2%CVE-2023-3699HIGHAn Improper Privilege Management vulnerability was found on the ADMEPSS 0.1%CVE-2026-24935MEDIUMAn improper certificate validation vulnerability was found in a third-party NAT traversal module.EPSS 0.1%CVE-2025-7378MEDIUMAn improper input validation vulnerability was found on manipulating configuration of ADMEPSS 0.1%CVE-2025-13053HIGHA missing encryption of sensitive data vulnerability was found in the UPS settings of ADMEPSS 0.1%