CVE-2023-3698: A Command injection vulnerability was found on Printer service of ADM
Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-3698?
The severity of CVE-2023-3698 is high with a severity value of 8.5.
What is the vulnerability description of CVE-2023-3698?
CVE-2023-3698 refers to a printer service vulnerability that fails to handle user input properly, allowing unauthorized remote users to navigate beyond the intended directory structure and delete files.
Which products and versions are affected by CVE-2023-3698?
CVE-2023-3698 affects ASUSTOR Data Master versions 4.0.6.RIS1 and below, as well as versions 4.1.0 and below, including versions 4.2.2.RI61 and below.
How can I fix the CVE-2023-3698 vulnerability?
To fix the CVE-2023-3698 vulnerability, it is recommended to update ASUSTOR Data Master to version 4.2.3.RK91 or later.
Where can I find more information about the CVE-2023-3698 vulnerability?
You can find more information about the CVE-2023-3698 vulnerability at the following reference link: [ASUSTOR Security Advisory](https://www.asustor.com/security/security_advisory_detail?id=28)