Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Synology DiskStation Manager ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen und Dateien zu manipulieren.
Product
DiskStation Manager (DSM) ist ein webbasiertes Betriebssystem für Synology NAS-Geräte.
Vulnerabilities 6
-
Medium 6.5
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in wor…
-
Medium 6.5
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service managem…
-
Medium 5.3
Exposure of sensitive information to an unauthorized actor vulnerability in Web Server in Synology DiskStation Manager …
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management fu…
-
Medium 4.7
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Security Manageme…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2022-27825, EUVD-2022-27824
-
#1
Initiale Fassung
References
-
NVD NIST Security Advisory vom 2022-02-06
https://nvd.nist.gov/vuln/detail/CVE-2022-22680
-
NVD NIST Security Advisory vom 2022-02-06
https://nvd.nist.gov/vuln/detail/CVE-2022-22679
-
NVD NIST Security Advisory vom 2022-02-06
https://nvd.nist.gov/vuln/detail/CVE-2021-43929
-
NVD NIST Security Advisory vom 2022-02-06
https://nvd.nist.gov/vuln/detail/CVE-2021-43927
-
NVD NIST Security Advisory vom 2022-02-06
https://nvd.nist.gov/vuln/detail/CVE-2021-43926
-
NVD NIST Security Advisory vom 2022-02-06
https://nvd.nist.gov/vuln/detail/CVE-2021-43925
-
Synology Security Advisory vom 2022-02-06
https://www.synology.com/en-global/security/advisory/Synology_SA_22_01