Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
An improper certificates validation vulnerability was found in the Notification settings of ADM
Vulnerability Description
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the SMTP. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RKD2 as well as from ADM 5.0.0 through ADM 5.1.0.RN42.
CVSS Information
N/A
Vulnerability Type
证书验证不恰当
Vulnerability Title
ASUSTOR ADM 安全漏洞
Vulnerability Description
ASUSTOR ADM是中国华芸科技（ASUSTOR）公司的一种所有 ASUSTOR NAS 设备的专用操作系统。 ASUSTOR ADM 4.1.0版本至4.3.3.RKD2版本和5.0.0版本至5.1.0.RN42版本存在安全漏洞，该漏洞源于TLS/SSL证书验证不当，可能导致中间人攻击。
CVSS Information
N/A
Vulnerability Type
N/A