CVE-2022-37398: A stack-based buffer overflow vulnerability was found on ADM

Q: What is CVE-2022-37398?

CVE-2022-37398 is a stack-based buffer overflow vulnerability found in ADM when using WebDAV due to the lack of data size validation.

Q: What is the severity of CVE-2022-37398?

The severity of CVE-2022-37398 is high with a CVSS score of 8.8.

Q: How can CVE-2022-37398 be exploited?

CVE-2022-37398 can be exploited by an attacker to run arbitrary code.

Q: Which versions of ADM are affected by CVE-2022-37398?

ADM versions 3.5.9.RUE3 and below, 4.0.5.RVI1 and below, and 4.1.0.RJD1 and below are affected by CVE-2022-37398.

Q: How can I fix CVE-2022-37398?

To fix CVE-2022-37398, it is recommended to update ADM to versions higher than 3.5.9.RUE3, 4.0.5.RVI1, and 4.1.0.RJD1 respectively.

Published Aug 5, 2022

Updated

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include: 3.5.9.RUE3 and below, 4.0.5.RVI1 and below as well as 4.1.0.RJD1 and below.

Affected Software

3 affected components

ASUSTOR ADM>=3.5.0<=3.5.9.rue3

ASUSTOR ADM>=4.0.0<=4.0.5.rvi1

ASUSTOR ADM>=4.1.0<=4.1.0.rjd1

Event History

Aug 5, 2022

CVE Published

via MITRE·04:46 PM

Data Sourced

via MITRE·04:46 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-37398?

CVE-2022-37398 is a stack-based buffer overflow vulnerability found in ADM when using WebDAV due to the lack of data size validation.

What is the severity of CVE-2022-37398?

The severity of CVE-2022-37398 is high with a CVSS score of 8.8.

How can CVE-2022-37398 be exploited?

CVE-2022-37398 can be exploited by an attacker to run arbitrary code.

Which versions of ADM are affected by CVE-2022-37398?

ADM versions 3.5.9.RUE3 and below, 4.0.5.RVI1 and below, and 4.1.0.RJD1 and below are affected by CVE-2022-37398.

How can I fix CVE-2022-37398?