VULNERABILITY INTELLIGENCE

CVE-2023-3698

CVSS score8.5 HIGH
EPSS probability0.64%
CISA KEVNot currently listed
Published2023-08-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Description

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Weakness classification

  • security@asustor.com: CWE-22
  • nvd@nist.gov: CWE-22

Primary references