High · 7.8 CVE-2022-49038 EUVD-2022-53880GHSA-9427-wg4q-6gmj

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082…

Published Sep 26, 2024 · Updated Sep 26, 2024 · Assigned by synology

Vendor: Synology Product: Synology Drive Client

Description

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Synology	Synology Drive Client	< 3.5.0-16084	3.5.0-16084

References

Synology-SA-24:10 Synology Drive Client vendor-advisory