Lucene search

PRIOn knowledge basePRION:CVE-2023-2910

HistoryAug 17, 2023 - 10:15 a.m.

Command injection

2023-08-1710:15:00

PRIOn knowledge base

www.prio-n.com

command injection

printer service

asustor data master

remote execution

adm 4.0.6.ris1

adm 4.1.0

adm 4.2.2.ri61

8.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

Improper neutralization of special elements used in a command (‘Command Injection’) vulnerability in Printer service functionality in ASUSTOR Data Master (ADM) allows remote unauthorized users to execute arbitrary commands via unspecified vectors. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

CPENameOperatorVersion
data_mastereq>= 4.1.0.rhu2 AND < 4.2.3.rk91
data_mastereq>= 4.0.0.rib4 AND <= 4.0.6.ris1

CPE	Name	Operator	Version
	data_master	eq	>= 4.1.0.rhu2 AND < 4.2.3.rk91
	data_master	eq	>= 4.0.0.rib4 AND <= 4.0.6.ris1

References

www.asustor.com/security/security_advisory_detail?id=27