CVE-2024-31161: ASUS Download Master

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

The upload functionality of ASUS Download Master does not properly filter user input. Remote attackers with administrative privilege can exploit this vulnerability to upload any file to any location. They may even upload malicious web page files to the website directory, allowing arbitrary system commands to be executed upon browsing the webpage.

Affected products

• ASUS Download Master: before 3.1.0.114 (fixed in 3.1.0.114)

Published 2024-06-14. Last modified 2026-06-17.