CVE-2019-11688 in exFAT Driver

Sumário

de MITRE

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservar: 02/05/2019
• Moderação: aceite
• Entrada: VDB-151789
• CPE: pronto
• CWE: CWE-295 (confirmado)
• CVSS: 7.4 (NVD)
• EPSS: 0.01096
• KEV: não
• Atividades: muito baixo
• Sector: Agriculture, Transportation, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11688
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11688
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11688/