VYPR
← All advisories
High severity8.5NVD Advisory· Published May 31, 2023· Updated Jun 17, 2026

CVE-2023-2909

CVE-2023-2909

Description

EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files. Affected products and versions include: ADM 4.0.6.REG2, 4.1.0 and below as well as ADM 4.2.1.RGE2 and below.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Asustor/Adm3 versions
    cpe:2.3:a:asustor:adm:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:asustor:adm:*:*:*:*:*:*:*:*range: >=4.0.0,<=4.0.6.reg2
    • (no CPE)range: <=4.0.6.REG2, <=4.1.0, <=4.2.1.RGE2
    • (no CPE)range: 4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.