CVE-2019-11688

7.4 highEPSS 1.1%

High (7.4) in asustor exfat driver. EPSS 1.1% chance of exploitation in the next 30 days.

An issue was discovered in ASUSTOR exFAT Driver through 1.0.0.r20. When conducting license validation, exfat.cgi and exfatctl accept any certificate for asustornasapi.asustor.com. In other words, there is Missing SSL Certificate Validation.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2020-03-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

asustor:exfat_driver

References

https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
https://www.asustor.com/app_central/app_detail?id=776
https://github.com/mikedamm/CVEs/blob/master/CVE-2019-11688.md
https://www.asustor.com/app_central/app_detail?id=776

Check your stack JSON