Skip to content
OpenAdvisories
High · 7.2 CVE-2022-27616 EUVD-2022-32117GHSA-fg9r-79m2-8cv9

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi component in Synology Di…

Published Aug 3, 2022 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: DiskStation Manager (DSM)

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 7.0.1-42218-3 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 7.0.1-42218-3 7.0.1-42218-3

References