Medium · 4.7 CVE-2021-43926 EUVD-2021-30788GHSA-498m-2jp9-66x5

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synol…

Published Feb 7, 2022 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in Log Management functionality in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote attackers to inject SQL commands via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	DiskStation Manager (DSM)	unspecified – < 7.0.1-42218-2	7.0.1-42218-2

Advisories 1

WID-SEC-2025-2192 Synology DiskStation Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 5, 2025

References

https://www.synology.com/security/advisory/Synology_SA_22_01