CVE-2018-12316: Command Injection
Published Dec 4, 2018
·Updated
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter.
Affected Software
2 affected components
ASUSTOR Data Master=3.1.1
ASUSTOR As602t
Event History
Dec 4, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this OS Command Injection vulnerability in ASUSTOR ADM version 3.1.1?
The vulnerability ID for this OS Command Injection vulnerability in ASUSTOR ADM version 3.1.1 is CVE-2018-12316.
2
What is the severity of CVE-2018-12316?
The severity of CVE-2018-12316 is critical with a CVSS score of 8.8.
3
How does the OS Command Injection vulnerability in upload.cgi affect ASUSTOR ADM version 3.1.1?
The OS Command Injection vulnerability in upload.cgi allows attackers to execute system commands by modifying the filename POST parameter in ASUSTOR ADM version 3.1.1.
4
Which software version of ASUSTOR ADM is affected by CVE-2018-12316?
ASUSTOR ADM version 3.1.1 is affected by CVE-2018-12316.
5
Is the Asustor As602t device vulnerable to CVE-2018-12316?
No, the Asustor As602t device is not vulnerable to CVE-2018-12316.