Skip to content
OpenAdvisories
Critical · 10.0 CVE-2022-27626 EUVD-2022-32127GHSA-2gm7-4g69-r63q

A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the sessi…

Published Oct 20, 2022 · Updated May 8, 2025 · Assigned by synology

Description

A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.

Affected products

VendorProductAffectedFixed
Synology DiskStation Manager (DSM) unspecified – < 7.1.1-42962-2 7.1.1-42962-2

References