CVE-2023-3699

An Improper Privilege Management vulnerability was found in ASUSTOR Data Master (ADM) allows an unprivileged local users to modify the storage devices configuration. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Score

CVSS 3.1 8.7 High

Status

Modified - security@asustor.com

Published

2023-08-22

Last modified

2024-10-02

Weaknesses

CWE-269

Affected products

• Adm (Asustor)
• Data Master (Asustor)

References

• https://www.asustor.com/security/security_advisory_detail?id=29