Medium severity · published Jul 9, 2025
CVE-2025-7379
A security bypass vulnerability was found in DataSync Center installed on ADM
5.2
CVSS
0.2%
EPSS
No
On KEV
Description
A security bypass vulnerability allows exploitation via Reverse Tabnabbing, a type of phishing attack where attackers can manipulate the content of the original tab, leading to credential theft and other security risks. This issue affects DataSync Center: from 1.1.0 before 1.1.0.r207, and from 1.2.0 before 1.2.0.r206.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 9% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
ADM · ASUSTOR
1.1.0 before 1.1.0.r207; 1.2.0 before 1.2.0.r206 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-7379
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-7379
www.asustor.com
https://www.asustor.com/security/security_advisory_detail?id=42
More from ADM
10.0
CVE-2023-2909
EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files
9.8
CVE-2026-24936
An improper input validation vulnerability was found in ADM while joining a AD Domain.
9.8
CVE-2023-30770
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation
9.8
CVE-2018-11510
The ASUSTOR ADM 3.1.0.RFQ3 NAS portal suffers from an unauthenticated remote code execution vulnerability in the portal/apis/aggrecate_js.cgi file by embedding OS commands in the…
8.8
CVE-2022-37398
A stack-based buffer overflow vulnerability was found on ADM