← CVE Intelligence

CVE-2023-2910

A Command injection vulnerability was found on Printer service of ADM PUBLISHED

Description (CNA)

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Printer service functionality in ASUSTOR Data Master (ADM) allows remote unauthorized users to execute arbitrary commands via unspecified vectors. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected (CNA)

Vendor / productVersions
ASUSTOR / ADMaffected 4.0 through 4.0.6.RIS1; affected 4.1 through 4.1.0.RLQ1; affected 4.2 through 4.2.2.RI61

CWE

CWE-77

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.