CVE-2023-30770: A stack-based buffer overflow vulnerability was found in the ADM

Q: What is CVE-2023-30770?

CVE-2023-30770 is a stack-based buffer overflow vulnerability found in the ASUSTOR Data Master (ADM) software.

Q: How severe is CVE-2023-30770?

CVE-2023-30770 has a severity rating of 9.8 (critical).

Q: How can CVE-2023-30770 be exploited?

CVE-2023-30770 can be exploited by an attacker to execute arbitrary code.

Q: Which versions of ASUSTOR Data Master (ADM) are affected by CVE-2023-30770?

ASUSTOR Data Master (ADM) versions 4.0.6.REG2, 4.1.0 and below, and 4.2.0.RE71 and below are affected by CVE-2023-30770.

Q: How can I fix CVE-2023-30770?

To fix CVE-2023-30770, it is recommended to update ASUSTOR Data Master (ADM) to a version that is not affected.

Published Apr 17, 2023

Updated

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.

Affected Software

2 affected components

ASUSTOR ADM>=4.0.0.rib4<=4.0.6.reg2

ASUSTOR ADM>=4.1.0.rhu2<4.2.1.rge2

Remediation

Information

Update ADM to the latest version for fixing the issue.

Event History

Apr 17, 2023

CVE Published

via MITRE·06:32 AM

Data Sourced

via MITRE·06:32 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-30770?

CVE-2023-30770 is a stack-based buffer overflow vulnerability found in the ASUSTOR Data Master (ADM) software.

How severe is CVE-2023-30770?

CVE-2023-30770 has a severity rating of 9.8 (critical).

How can CVE-2023-30770 be exploited?