What’s Vulnerable › Vulnerabilities

CVE-2023-4475: An Arbitrary File Movement vulnerability was found on the ADM

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-22 · updated 2026-06-17
• Weakness: CWE-552

Description

An Arbitrary File Movement vulnerability was found in ASUSTOR Data Master (ADM) allows an attacker to exploit the file renaming feature to move files to unintended directories. Affected products and versions include: ADM 4.0.6.RIS1, 4.1.0 and below as well as ADM 4.2.2.RI61 and below.

Affected products

• Tenable ASUSTOR Data Master: from 4.0.6.ris1 before 4.2.2.ri61 — fixed in 4.2.2.ri61

How to fix

Upgrade to a fixed version: Tenable ASUSTOR Data Master 4.2.2.ri61. Check the vendor advisory for mitigations.

References

• https://www.asustor.com/security/security_advisory_detail?id=30
• https://www.asustor.com/security/security_advisory_detail?id=30

Get alerted when CVE-2023-4475 or the next vulnerability affects your stack