CVE-2018-11342: Asustor AS6202T Firmware

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

A path traversal vulnerability in fileExplorer.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a path to a file on the system to create folders via the dest_folder parameter.

Affected products

• Asustor AS6202T Firmware: up to and including adm_3.1.0.rfq3

Published 2018-05-22. Last modified 2026-06-17.