Skip to content
OpenAdvisories
High · 7.4 CVE-2022-27623 EUVD-2022-32124GHSA-7qq8-2p9r-p388

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7…

Published Oct 25, 2022 · Updated May 7, 2025 · Assigned by synology

Description

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 7.1-42661 7.1-42661

References