CVE-2023-4475

Summary

CVE-2023-4475 is a vulnerability affecting ASUSTOR Data Master (ADM) versions 4.0.6.RIS1, 4.1.0, and below, as well as 4.2.2.RI61 and below. An attacker can exploit the Arbitrary File Movement flaw in ADM's file renaming feature and unintentionally transfer files to unauthorized directories. This vulnerability could lead to unauthorized data access or manipulation. Users are strongly urged to update their ADM software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.