Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2025-13052
PUBLISHED
More InfoOfficial Page
Assigner-ASUSTOR1
Assigner Org ID-f35eaae9-79f2-4d0d-a5c7-7bea6ed6be77
View Known Exploited Vulnerability (KEV) details
Published At-12 Dec, 2025 | 02:30
Updated At-12 Dec, 2025 | 18:17
Rejected At-
▼CVE Numbering Authority (CNA)
An improper certificates validation vulnerability was found in the Notification settings of ADM

When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the SMTP. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RKD2 as well as from ADM 5.0.0 through ADM 5.1.0.RN42.

Affected Products
Vendor
ASUSTOR Inc.ASUSTOR
Product
ADM
Package Name
Notifications
Platforms
  • Linux
  • x86
  • ARM
  • 64 bit
Default Status
unaffected
Versions
Affected
  • From 4.1.0 through 4.3.3.RKD2 (custom)
  • From 5.0.0 through 5.1.0.RN42 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-295CWE-295 Improper Certificate Validation
Type: CWE
CWE ID: CWE-295
Description: CWE-295 Improper Certificate Validation
Metrics
VersionBase scoreBase severityVector
4.07.0HIGH
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:L
Version: 4.0
Base score: 7.0
Base severity: HIGH
Vector:
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:L
Metrics Other Info
Impacts
CAPEC IDDescription
CAPEC-157CAPEC-157 Sniffing Attacks
CAPEC ID: CAPEC-157
Description: CAPEC-157 Sniffing Attacks
Solutions

Configurations

Workarounds

Exploits

Credits

reporter
Nuke
Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
https://www.asustor.com/security/security_advisory_detail?id=49
vendor-advisory
Hyperlink: https://www.asustor.com/security/security_advisory_detail?id=49
Resource:
vendor-advisory
▼Authorized Data Publishers (ADP)
CISA ADP Vulnrichment
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

Configurations

Workarounds

Exploits

Credits

Timeline
EventDate
Replaced By

Rejected Reason

References
HyperlinkResource
Details not found