Описание
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.0.0.rib4 (включая) до 4.0.6.reg2 (включая)Версия от 4.1.0.rhu2 (включая) до 4.2.1.rge2 (исключая)
Одно из
cpe:2.3:a:asustor:adm:*:*:*:*:*:*:*:*
cpe:2.3:a:asustor:adm:*:*:*:*:*:*:*:*
EPSS
Процентиль: 61%
0.00415
Низкий
7.1 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-787
CWE-787
Связанные уязвимости
CVSS3: 9.8
github
почти 3 года назад
A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.
EPSS
Процентиль: 61%
0.00415
Низкий
7.1 High
CVSS3
9.8 Critical
CVSS3
Дефекты
CWE-787
CWE-787