Skip to content
OpenAdvisories
Critical · 9.9 CVE-2021-34809 EUVD-2021-21456GHSA-46j9-2j4r-83q6

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology …

Published Jun 18, 2021 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Download Station

Description

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Download Station unspecified – < 3.8.16-3566 3.8.16-3566

References