Back to Database
Status published
Medium
CVE-2025-7379
A security bypass vulnerability was found in DataSync Center installed on ADM
Vulnerability Description
A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from 1.2.0 before 1.2.0.r206.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-7379
Credits & Attribution
No credits recorded in the NVD database.
More from ASUSTOR
View All →CVE-2025-8070
Windows service registered with an unquoted ImagePath vulnerability in the system registry
Critical
9.2
CVE-2025-7699
An improper access control vulnerability was found in the EZ Sync Manager of ADM
High
7.1
CVE-2025-7618
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
Medium
4.8
CVE-2025-7380
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM
Medium
4.8
CVE-2025-7378
An improper input validation vulnerability was found on manipulating configuration of ADM
Medium
6
Affected Vendor
ASUSTOR
View all reports →Affected Software
ADM
Vulnerable Versions:
1.1.0, 1.2.0
Timeline
Official Publish:
July 9th, 2025
Last Modified:
July 9th, 2025
Added to House:
July 22nd, 2026