Design/Logic Flaw

2023-08-1710:15:00

PRIOn knowledge base

www.prio-n.com

printer service

unauthorized access

file deletion

vulnerability

nvd

7.9 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.2%

JSON

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

CPENameOperatorVersion
data_mastereq>= 4.1.0.rhu2 AND < 4.2.3.rk91
data_mastereq>= 4.0.0.rib4 AND <= 4.0.6.ris1

CPE	Name	Operator	Version
	data_master	eq	>= 4.1.0.rhu2 AND < 4.2.3.rk91
	data_master	eq	>= 4.0.0.rib4 AND <= 4.0.6.ris1

References

www.asustor.com/security/security_advisory_detail?id=28