CVE-2023-2910

CVSS 3.1 Score 4.6 of 10 (medium)

Details

Published Aug 17, 2023

Updated: Aug 23, 2023

CWE ID 1236

Summary

CVE-2023-2910 is a critical command injection vulnerability affecting the Printer service functionality in ASUSTOR Data Master (ADM) versions 4.0.6.RIS1, 4.1.0, and below, as well as 4.2.2.RI61 and below. This issue arises due to improper handling of special elements in user input, enabling remote unauthorized users to execute arbitrary commands. The precise vectors of attack are yet to be determined.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

SAP Basis

Affected Vendors

SAP SE

Advisories, Assessments, and Mitigations

https://app.recordedfuture.com/live/sc/entity/qyM_MA
https://www.cve.org/CVERecord?id=CVE-2023-2910
https://nvd.nist.gov/vuln/detail/CVE-2023-2910

Back to Vulnerability Database