CVE-2023-30770CWE-787

A stack-based buffer overflow vulnerability was found in the ADM

High · published April 17, 2023

CVSS v3.1
7.1
EPSS
1%
Percentile
48.7
In the wild
Unconfirmed
What it is

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00614 · 48.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2023-04-17T06:32Z
EPSS history
Timeline
  • 17 APR 06:32Z
    A stack-based buffer overflow vulnerability was found in the ADM
    cvelistv5