PT-2023-22137
CVE-2023-2909
·
تاريخ النشر
2023-05-31
·
تاريخ التحديث
2023-06-07
الوصف من
CVSS 3.1
10
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ADM versions 4.0.6.REG2 through 4.1.0
ADM versions 4.2.1.RGE2 and below
Description
The EZ Sync service fails to adequately handle user input, allowing an attacker to navigate beyond the intended directory structure and delete files.
Recommendations
For ADM versions 4.0.6.REG2 through 4.1.0, consider restricting access to the EZ Sync service until a patch is available.
For ADM versions 4.2.1.RGE2 and below, consider restricting access to the EZ Sync service until a patch is available.
As a temporary workaround, consider disabling the EZ Sync service to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾