CVE-2023-30770: A stack-based buffer overflow vulnerability was found in the ADM

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-04-17 · updated 2026-06-17
Weakness: CWE-787

Description

A stack-based buffer overflow vulnerability was found in the ASUSTOR Data Master (ADM) due to the lack of data size validation. An attacker can exploit this vulnerability to execute arbitrary code. Affected ADM versions include: 4.0.6.REG2, 4.1.0 and below as well as 4.2.0.RE71 and below.

Affected products

ASUSTOR ADM: from 4.0.0.rib4 through 4.0.6.reg2; from 4.1.0.rhu2 before 4.2.1.rge2 — fixed in 4.2.1.rge2

How to fix

Upgrade to a fixed version: ASUSTOR ADM 4.2.1.rge2. Check the vendor advisory for mitigations.

References

https://www.asustor.com/security/security_advisory_detail?id=21
https://www.asustor.com/security/security_advisory_detail?id=21

Get alerted when CVE-2023-30770 or the next vulnerability affects your stack