CVE-2018-12313: Command Injection
Published Dec 4, 2018
·Updated
OS command injection in snmp.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter.
Affected Software
2 affected components
ASUSTOR Data Master=3.1.1
ASUSTOR As602t
Event History
Dec 4, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-12313?
CVE-2018-12313 is an OS command injection vulnerability in snmp.cgi in ASUSTOR ADM version 3.1.1.
2
How severe is CVE-2018-12313?
CVE-2018-12313 has a severity score of 9.8 (critical).
3
How does CVE-2018-12313 impact ASUSTOR ADM version 3.1.1?
CVE-2018-12313 allows attackers to execute system commands without authentication via the "rocommunity" URL parameter.
4
Which software versions of ASUSTOR ADM are affected by CVE-2018-12313?
ASUSTOR ADM version 3.1.1 is affected by CVE-2018-12313.
5
Is ASUSTOR As602t vulnerable to CVE-2018-12313?
No, ASUSTOR As602t is not vulnerable to CVE-2018-12313.
6
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-12313?
The CWE IDs for CVE-2018-12313 are 77 and 78.