Description
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Synology | DiskStation Manager (DSM) | 7.2 – < 7.2-64561, 7.1 – < 7.1.*, 7.0 – < 7.0.*, 6.2 – < 6.2.* | 7.2-64561 |
| Synology | Unified Controller (DSMUC) | 3.1 – < 3.1.* | 3.1.* |
| Synology | Synology Router Manager (SRM) | 1.3 – < 1.3.*, 1.2 – < 1.2.* | 1.3.* |
Advisories 1
- WID-SEC-2023-1426 Synology Router Manager: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jun 18, 2023
References
- Synology-SA-23:07 DSM vendor-advisory
- Synology-SA-23:08 SRM vendor-advisory