VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 17, 2023· Updated Jun 17, 2026

CVE-2023-2910

CVE-2023-2910

Description

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in Printer service functionality in ASUSTOR Data Master (ADM) allows remote unauthorized users to execute arbitrary commands via unspecified vectors. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Asustor/Data Master2 versions
    cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:asustor:data_master:*:*:*:*:*:*:*:*range: >=4.0.0.rib4,<=4.0.6.ris1
    • (no CPE)range: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below
  • Asustor/Admcpe-rescue
    Range: 4.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.