Critical · 9.9 CVE-2021-34810 EUVD-2021-21457GHSA-473c-wh3w-ppx8

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated us…

Published Jun 18, 2021 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Download Station

Description

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Download Station	unspecified – < 3.8.16-3566	3.8.16-3566

References

https://www.synology.com/security/advisory/Synology_SA_21_11