Security Flaw in ASUSTOR exFAT Driver Affects NAS Products

CVE-2019-11688

What is CVE-2019-11688?

A significant security vulnerability has been identified in the ASUSTOR exFAT Driver, specifically in the version up to 1.0.0.r20. The issue arises during license validation where the components exfat.cgi and exfatctl fail to properly validate SSL certificates. This flaw allows for the acceptance of any SSL certificate for connections to asustornasapi.asustor.com, potentially exposing users to a range of security threats, including man-in-the-middle attacks. Users of affected versions should take caution and ensure their systems are updated to mitigate possible risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References