Skip to content
OpenAdvisories
Critical · 9.9 CVE-2021-43928 EUVD-2021-30790GHSA-xcmm-3w7w-cqq9

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving comp…

Published Feb 7, 2022 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Mail Station

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Mail Station unspecified – < 20211105-10315 20211105-10315

References