Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2022-4221

OS command injection in ASUS M25 NAS

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Asus NAS-M25 allows an unauthenticated attacker to inject arbitrary OS commands via unsanitized cookie values.This issue affects NAS-M25: through 1.0.1.7.

CVSS 3.1 · 9.8 Critical EPSS 4.9% KEV · Not listed
Vendors
Asus
Products
Nas-m25 Nas-m25 Firmware