CVE-2023-3699

Published: Aug 22, 2023Modified: Nov 21, 2024

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected (1)

Products: Asustor: Data Master

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Asustor Data Master	From 4.0.6.ris1 to 4.2.3.rk91

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (2)

https://www.asustor.com/security/security_advisory_detail?id=29

Source: security@asustor.com

Vendor Advisory

https://www.asustor.com/security/security_advisory_detail?id=29

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.