CVE-2019-11688: High severity asustor exfat driver vulnerability
Published Mar 18, 2020
·Updated
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.
Affected Software
3 affected components
ASUSTOR exFAT Driver=1.0.0-r14
ASUSTOR exFAT Driver=1.0.0-r15
ASUSTOR exFAT Driver=1.0.0-r20
Event History
Mar 18, 2020
CVE Published
via MITRE·02:58 PM
Data Sourced
via MITRE·02:58 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2019-11688.
2
What is the severity of CVE-2019-11688?
The severity of CVE-2019-11688 is high.
3
What is the affected software?
The affected software is ASUSTOR exFAT Driver versions 1.0.0-r14, 1.0.0-r15, and 1.0.0-r20.
4
What is the description of CVE-2019-11688?
CVE-2019-11688 is an issue in ASUSTOR exFAT Driver where the exfat.cgi and exfatctl components accept any certificate for asustornasapi.asustor.com, leading to missing SSL certificate validation.
5
How do I fix CVE-2019-11688?
To fix CVE-2019-11688, update the ASUSTOR exFAT Driver to the latest patched version.