Back to Database
Status published
Medium
CVE-2025-7378
An improper input validation vulnerability was found on manipulating configuration of ADM
Vulnerability Description
An improper Input Validation vulnerability allows injecting arbitrary values of the NAS configuration file in ASUSTOR ADM. This could potentially lead to system misconfiguration and break the format of the configuation file, causing the NAS to exhibit unexpected behavior. This issue affects ADM: from 4.1 before 4.3.1.R5A1.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7378
Credits & Attribution
No credits recorded in the NVD database.
More from ASUSTOR
View All →CVE-2025-8070
Windows service registered with an unquoted ImagePath vulnerability in the system registry
Critical
9.2
CVE-2025-7699
An improper access control vulnerability was found in the EZ Sync Manager of ADM
High
7.1
CVE-2025-7618
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
Medium
4.8
CVE-2025-7380
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
Medium
4.8
CVE-2025-7379
A security bypass vulnerability was found in DataSync Center installed on ADM
Medium
5.2
Affected Vendor
ASUSTOR
View all reports →Affected Software
ADM
Vulnerable Versions:
4.1
Timeline
Official Publish:
July 9th, 2025
Last Modified:
July 9th, 2025
Added to House:
July 22nd, 2026