CVE-2023-3697 - A Command injection vulnerability was found on Printer service of ADM

Back Back to CVE browser

HIGH

A Command injection vulnerability was found on Printer service of ADM

Published Aug 17, 2023

8.8

HIGH

CVSS 3.1

EPSS 0.66%

Description

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and create files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected products

Vendor Asustor Product ADM Default
affected
- Version
  4.0
  Status
  affected
  Constraints
  <=4.0.6.RIS1
- Version
  4.1
  Status
  affected
  Constraints
  <=4.1.0.RLQ1
- Version
  4.2
  Status
  affected
  Constraints
  <=4.2.2.RI61

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Asustor

ADM

affected

Version	Status	Constraints
4.0	affected	<=4.0.6.RIS1
4.1	affected	<=4.1.0.RLQ1
4.2	affected	<=4.2.2.RI61

Vendor Asustor Product Adm Default
n/a
- Version
  4.0
  Status
  affected
  Constraints
  <=4.0.6.RIS1
- Version
  4.1
  Status
  affected
  Constraints
  <=4.1.0.RLQ1
- Version
  4.2
  Status
  affected
  Constraints
  <=4.2.2.RI61

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Asustor

Adm

n/a

Version	Status	Constraints
4.0	affected	<=4.0.6.RIS1
4.1	affected	<=4.1.0.RLQ1
4.2	affected	<=4.2.2.RI61

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44333
Advisory
https://www.asustor.com/security/security_advisory_detail?id=28
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44333		Advisory
https://www.asustor.com/security/security_advisory_detail?id=28		vendor-advisoryVendor Advisory