Description

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and create files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Related CPE's

o

asustor

data_master

2

References

https://www.asustor.com/security/security_advisory_detail?id=28

Vendor Advisory

https://www.asustor.com/security/security_advisory_detail?id=28

Vendor Advisory

Weaknesses

[email protected]

Secondary
CWE-22

[email protected]

Primary
CWE-22

CVSS impact metrics

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

8.5 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-17T10:15:10.880Z

3 years ago

Last modified

2026-06-17T06:14:39.450Z

2 months ago