CVE-2018-11344: Asustor AS6202T Firmware

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

A path traversal vulnerability in download.cgi in ASUSTOR AS6202T ADM 3.1.0.RFQ3 allows attackers to arbitrarily specify a file on the system to download via the file1 parameter.

Affected products

• Asustor AS6202T Firmware: up to and including adm_3.1.0.rfq3

Published 2018-05-22. Last modified 2026-06-17.