How many CVEs does ASUSTOR have?

ASUSTOR has 70 published CVE records since 2018, including 27 in the last two years.

How many ASUSTOR CVEs are in CISA KEV?

None of ASUSTOR's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which ASUSTOR products have the most CVEs?

The ASUSTOR products with the most published CVEs are data master, ADM, as602t, as6202t, as6202t firmware.

What are the most common weakness types in ASUSTOR CVEs?

ASUSTOR's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-295 (Improper Certificate Validation).

Are there public exploits for ASUSTOR vulnerabilities?

Yes — 34 of ASUSTOR's CVEs have a known public exploit.

How many critical ASUSTOR vulnerabilities are there?

ASUSTOR has 11 critical and 38 high-severity CVEs.

What is the average severity of ASUSTOR CVEs?

The average CVSS base score across ASUSTOR's scored CVEs is 7.6.

RadicalNotion.AI

Log in Create an account

70 CVEs

ASUSTOR Vulnerabilities

Name: ASUSTOR vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for ASUSTOR.

70

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

34

Public exploits

PoC or exploit code

7.6

Avg CVSS

2018–2026

Overview

ASUSTOR has 70 published CVE records since 2018, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 34 have a known public exploit. The average CVSS base score across scored CVEs is 7.6.

Security scorecard

A quick read on ASUSTOR's vulnerability posture, as a share of its 70 published CVEs.

Average CVSS: 7.6
Critical / high: 70%
Actively exploited (KEV): 0%
Public exploit available: 49%
Patch available: 39%

Severity and exploitation

How the CVSS severity of ASUSTOR's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical11

High38

Medium21

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of ASUSTOR's CVEs are currently listed in CISA's KEV catalog.

Public exploits

34

34 of ASUSTOR's CVEs have a known public exploit available.

Most affected products

The ASUSTOR products with the most published CVEs. Follow any product to browse its versions and vulnerabilities.

Common weakness types

The CWE weakness categories most often found in ASUSTOR CVEs. Follow any weakness for its full explanation.

CNAs that assign these CVEs

The CVE Numbering Authorities that publish ASUSTOR CVE records.

Disclosure activity by year

How many ASUSTOR CVEs were published each year.

2018

31

2020

2

2022

1

2023

9

2025

9

2026

18

Latest ASUSTOR CVEs

The most recently disclosed vulnerabilities affecting ASUSTOR.

An HTTP header injection vulnerability was found in the ADM
CWE-113
Critical · CVSS 9.2
EPSS 0.7%2026-10-07
An improper authentication and path traversal vulnerability exists in ASUSTOR Backup Plan and ASUSTOR EZ Sync.
CWE-287
High · CVSS 8.5
EPSS 0.2%2026-08-04
A stack-based buffer overflow vulnerability was found in the File Explorer on the ADM
CWE-121
High · CVSS 8.7
EPSS 0.5%2026-07-30
A path traversal vulnerability was found in the IHM Log handling of ADM
CWE-22
High · CVSS 7.1
EPSS 0.5%2026-07-30
A path traversal vulnerability was found in the Wallpaper component of ADM
CWE-22
Medium · CVSS 6.9
EPSS 0.5%2026-07-30
A path traversal vulnerability was found in the VPN Clients on the ADM
CWE-22
High · CVSS 7.0
EPSS 0.3%2026-07-30
A format string vulnerability was found in the Notification OAuth settings of ADM
CWE-134
High · CVSS 8.6
EPSS 0.5%2026-07-30
A format string vulnerability was found in the Rsync Backup on the ADM
CWE-134
High · CVSS 7.1
EPSS 0.5%2026-07-30
A format string vulnerability was found in the Internal Backup on the ADM
CWE-134
High · CVSS 7.1
EPSS 0.5%2026-07-30
A stored format string vulnerability was found in the FTP Backup on the ADM
CWE-134
High · CVSS 7.1
EPSS 0.5%2026-07-30
A command injection vulnerability was found in the PPTP VPN Clients on the ADM
CWE-78
Critical · CVSS 9.4
EPSS 2.1%2026-04-20
A stack-based buffer overflow vulnerability in the VPN Clients on the ADM
CWE-121
High · CVSS 8.6
EPSS 0.8%2026-04-20

Get an alert for each new ASUSTOR CVE, with AI-written analysis and remediation steps.

Monitor ASUSTOR CVEs

Other vendors

CVE counts for other vendors.

microsoft42,015 CVEs linux25,264 CVEs Google17,495 CVEs Apple15,508 CVEs Oracle13,348 CVEs Debian10,234 CVEs IBM9,452 CVEs Red Hat8,588 CVEs

Browse all vendors

Frequently asked questions

Common questions about ASUSTOR vulnerabilities.

How many CVEs does ASUSTOR have?: ASUSTOR has 70 published CVE records since 2018, including 27 in the last two years.
How many ASUSTOR CVEs are in CISA KEV?: None of ASUSTOR's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Which ASUSTOR products have the most CVEs?: The ASUSTOR products with the most published CVEs are data master, ADM, as602t, as6202t, as6202t firmware.
What are the most common weakness types in ASUSTOR CVEs?: ASUSTOR's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-295 (Improper Certificate Validation).
Are there public exploits for ASUSTOR vulnerabilities?: Yes — 34 of ASUSTOR's CVEs have a known public exploit.
How many critical ASUSTOR vulnerabilities are there?: ASUSTOR has 11 critical and 38 high-severity CVEs.
What is the average severity of ASUSTOR CVEs?: The average CVSS base score across ASUSTOR's scored CVEs is 7.6.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track ASUSTOR vulnerabilities

Get an alert for each new ASUSTOR CVE, with AI-written analysis and remediation steps.

Create an account See pricing