A high-severity stack-based buffer overflow vulnerability in ASUSTOR ADM File Explorer poses a significant risk of arbitrary code execution for authenticated users.

This is a stack-based buffer overflow (CWE-121) occurring within the File Explorer component of the ADM operating system. The vulnerability is exploitable by a user with low-level privileges (PR:L) over the network (AV:N), potentially leading to a full system compromise.

Successful exploitation allows an attacker to gain unauthorized control over the affected NAS device. Given the CVSS score of 8.7, this flaw presents a severe risk of data loss, unauthorized access to sensitive files, and potential disruption of critical backup or storage services, leading to significant operational impact.

Immediate Action: Update your ASUSTOR ADM firmware to the latest version provided by the vendor at their official security advisory portal.

Proactive Monitoring: Review system access logs for unusual activity within the File Explorer interface or unexpected process crashes associated with file management tasks.

Compensating Controls: Restrict access to the ADM web interface to trusted management networks and implement strict user access controls to minimize the number of accounts with elevated or file-management privileges.

Public Exploit Available: Unknown.

The severity of this vulnerability necessitates immediate attention. Administrators should prioritize patching all affected ASUSTOR devices to prevent potential exploitation. If patching is not immediately feasible, ensure the management interface is not exposed to the public internet.