CVE-2023-3698CWE-22

A Command injection vulnerability was found on Printer service of ADM

High · published August 17, 2023

CVSS v3.1
8.5
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

Printer service fails to adequately handle user input, allowing an remote unauthorized users to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

The record
Technical detail
CVSS v3.1
8.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00642 · 50.1th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-08-17T09:34Z
EPSS history
Timeline
  • 17 AUG 09:34Z
    A Command injection vulnerability was found on Printer service of ADM
    cvelistv5