Skip to content
OpenAdvisories
High · 7.2 CVE-2022-22684 EUVD-2022-27829GHSA-rq6g-fph9-p9mc

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Sy…

Published Jul 28, 2022 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 6.2.4-25553 6.2.4-25553

References