Description
Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | VPN Plus Server | < 1.4.4-0635, < 1.4.3-0534 | 1.4.4-0635 |
Advisories 1
- WID-SEC-2023-0046 Synology VPN Plus Server: Schwachstelle ermöglicht Ausführung beliebiger Kommandos BSI CERT-Bund (WID) · Jan 9, 2023
References
- Synology_SA_22_26 vendor-advisory