CVE-2023-3699

published 2023-08-22

CVE-2023-3699: An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices…

Priority P4 23 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I H A N

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
asustor	adm	4.0 – 4.0.6.RIS1	—
asustor	adm	4.1 – 4.1.0.RLQ1	—
asustor	adm	4.2 – 4.2.2.RI61	—
asustor	data_master	>= 4.0.6.ris1 < 4.2.3.rk91	4.2.3.rk91

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269