CVE-2023-4475
An Arbitrary File Movement vulnerability was found on the ADM
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 7.5EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
22 Aug 2023Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Affected products
ASUSTOR · ADMWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →