CVE-2018-11340: Asustor AS6202T Firmware

High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days.

An unrestricted file upload vulnerability in importuser.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to upload supplied data to a specified filename. This can be used to place attacker controlled code on the file system that is then executed.

Affected products

• Asustor AS6202T Firmware: up to and including adm_3.1.0.rfq3

Published 2018-05-22. Last modified 2026-06-17.