Medium · 4.2 CVE-2018-13298 EUVD-2018-5246GHSA-43rr-89mr-2rvg

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle atta…

Published Apr 1, 2019 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Android Moments Platform: Android

Description

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Android Moments	unspecified – < 1.2.3-199	1.2.3-199

References

https://www.synology.com/security/advisory/Synology_SA_18_52