CVE-2025-13052
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
When the user sets the Notification's sender to send emails to the SMTP server via msmtp, improperly validated TLS/SSL certificates allow an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain sensitive SMTP information.
Risk Assessment
An attacker can intercept SMTP communication and obtain sensitive information such as credentials or message content, potentially leading to data confidentiality breaches. Affected products include ADM versions from 4.1.0 through 4.3.3.RKD2 and from 5.0.0 through 5.1.0.RN42.
Recommendation
Update the ADM system to the latest available version that includes a fix for this vulnerability. Additionally, configure msmtp to properly validate TLS/SSL certificates.
Other vulnerabilities in ADM
See all- CVE-2026-105324Critical
An HTTP header injection vulnerability in start-page-loader.cgi of ADM allows an unauthenticated remote attacker to read arbitrary files on the host system. By sending a crafted HTTP request with injected headers via the state parameter, the attacker can leverage the underlying web server's X-Sendfile mechanism to retrieve sensitive files without authentication.
- CVE-2026-67248High
A stack-based buffer overflow vulnerability was found in the File Explorer on ADM. User-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer, potentially causing denial of service of the CGI process.
- CVE-2026-67247Medium
A path traversal vulnerability was found in the IHM Log handling of ADM. User-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file.
- CVE-2026-67246Medium
A path traversal vulnerability in the Wallpaper component of ADM. User-controlled wallpaper path input is not sufficiently validated, allowing access to files outside the intended wallpaper directory.
- CVE-2026-67245High
A path traversal vulnerability was found in the VPN Clients on ADM. User-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path.
- CVE-2026-67244High
A format string vulnerability was found in the Notification OAuth settings of ADM. User-controlled notification configuration input may be processed through an unsafe format string operation.
- CVE-2026-18188High
A format string vulnerability was found in the Rsync Backup on ADM. User-controlled rsync backup configuration or log data may be processed through an unsafe format string operation.
- CVE-2026-18187High
A format string vulnerability in the Internal Backup function of ADM. User-controlled task input is processed unsafely, allowing memory information disclosure or denial of service.
- CVE-2026-18186High
A stored format string vulnerability in the FTP Backup function of ADM. User-controlled backup configuration data is logged and later processed unsafely, allowing memory disclosure or denial of service.
- CVE-2025-13053Low
When a user configures the NAS to retrieve UPS status or control the UPS, a non-enforced TLS certificate verification can allow an attacker able to intercept network traffic to perform a man-in-the-middle (MITM) attack, which may obtain sensitive information of the UPS server configuration. This issue affects ADM from 4.1.0 through 4.3.3.RKD2 and from 5.0.0 through 5.1.0.RN42.
Original NVD description (English source)
When the user set the Notification's sender to send emails to the SMTP server via msmtp, an improper validated TLS/SSL certificates allows an attacker who can intercept network traffic between the SMTP client and server to execute a man-in-the-middle (MITM) attack, which may obtain the sensitive information of the SMTP. Affected products and versions include: from ADM 4.1.0 through ADM 4.3.3.RKD2 as well as from ADM 5.0.0 through ADM 5.1.0.RN42.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS