CVEvulnerability
CVE-2019-11688
7.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2020-03-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.4 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 8.8 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:N
- Weaknesses
- CWE-295
Description
An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.
Affected configurations
• asustor exfat driver 1.0.0
Related
Weakness · CWE (1)
- CWE-295 Improper Certificate Validation weakness
References
- https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md Exploit, Third Party Advisory
- https://www.asustor.com/app_central/app_detail?id=776 Vendor Advisory
- https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md Exploit, Third Party Advisory
- https://www.asustor.com/app_central/app_detail?id=776 Vendor Advisory