CVE-2022-37398

A stack-based buffer overflow vulnerability was found on ADM

State: Published
Severity: 7.1 High
Published: Aug 5, 2022
Updated: Jun 2, 2026
Reserved: Aug 4, 2022

Description

A stack-based buffer overflow vulnerability was found inside ADM when using WebDAV due to the lack of data size validation. An attacker can exploit this vulnerability to run arbitrary code. Affected ADM versions include: 3.5.9.RUE3 and below, 4.0.5.RVI1 and below as well as 4.1.0.RJD1 and below.

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H	ASUSTOR1

Weaknesses

CWE-121 Stack-based Buffer Overflow

Affected Products

Product	Versions
ADMASUSTOR	3.5 through 3.5.9.RUE3Affected 4.0 through 4.0.5.RVI1Affected 4.1 through 4.1.0.RJD1Affected

References

https://www.asustor.com/security/security_advisory_detail?id=12

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.