Description
Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | DiskStation Manager (DSM) | 7.1 – < 7.1-42661, 7.0 – < 7.0.1-42218-7, 6.2 – < 6.2.4-25556-8 | 7.1-42661 |
| Synology | Unified Controller (DSMUC) | 3.1 – < 3.1.* | 3.1.* |
| Synology | Synology Router Manager (SRM) | 1.3 – < 1.3.*, 1.2 – < 1.2.* | 1.3.* |
Advisories 1
- WID-SEC-2023-1426 Synology Router Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 18, 2023
References
- Synology-SA-23:05 DSM vendor-advisory
- Synology-SA-23:06 SRM vendor-advisory