Beveiligingsadvies

CVE-2023-2909

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-05-31 09:26:31

Laatst bijgewerkt 2025-01-09 21:01:20

Toegewezen door ASUSTOR1

CVSS-score 8.5

Status PUBLISHED

Beschrijving

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.

← Alle CVE's bekijken Bekijk op cve.org ↗