Unrestricted File Upload Vulnerability in ASUSTOR AS6202T ADM 3.1.0.RFQ3

CVE-2018-11340 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

An unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data to a specified filename. This can be used to place attacker controlled code on the file system that is then executed.

Learn more about our User Device Pen Test.