CVE-2023-51947

Name of the Vulnerable Software and Affected Versions actidata actiNAS SL 2U-8 RDX version 3.2.03-SP1

Description The issue is related to improper access control on the nasSvr.php file, allowing remote attackers to read and modify different types of data without authentication.

Recommendations For version 3.2.03-SP1, consider restricting access to the nasSvr.php file until a patch is available. As a temporary workaround, avoid using the nasSvr.php file for sensitive data operations until the issue is resolved. Restrict access to the vulnerable nasSvr.php file to minimize the risk of exploitation.