ADM vulnerabilities

A stack-based buffer overflow vulnerability was found in the File Explorer on ADM. User-controlled input is not properly validated before being decoded and copied into a fixed-size stack buffer, potentially causing denial of service of the CGI process.

A path traversal vulnerability was found in the IHM Log handling of ADM. User-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file.

A path traversal vulnerability in the Wallpaper component of ADM. User-controlled wallpaper path input is not sufficiently validated, allowing access to files outside the intended wallpaper directory.

A path traversal vulnerability was found in the VPN Clients on ADM. User-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path.

A format string vulnerability was found in the Notification OAuth settings of ADM. User-controlled notification configuration input may be processed through an unsafe format string operation.

A format string vulnerability was found in the Rsync Backup on ADM. User-controlled rsync backup configuration or log data may be processed through an unsafe format string operation.

A format string vulnerability in the Internal Backup function of ADM. User-controlled task input is processed unsafely, allowing memory information disclosure or denial of service.

A stored format string vulnerability in the FTP Backup function of ADM. User-controlled backup configuration data is logged and later processed unsafely, allowing memory disclosure or denial of service.