Skip to content
OpenAdvisories
High · 7.2 CVE-2021-29083 EUVD-2021-15724GHSA-cjg6-frrp-p7cp

Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6…

Published Apr 1, 2021 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology DiskStation Manager (DSM)

Description

Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute arbitrary code via realname parameter.

Affected products

VendorProductAffectedFixed
Synology Synology DiskStation Manager (DSM) unspecified – < 6.2.3-25426-3 6.2.3-25426-3

References