An issue exists in ASUSTOR exFAT Driver up to and including 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
asustor exfat driver 1.0.0 |