TI-2022-10607 Aliases CVE-2022-27626 GHSA-2gm7-4g69-r63q

Race condition in Synology DiskStation Manager

MEDIUM 51CWE-362Published 2022-10-20 · Updated 2025-05-08

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.01291 70th percentileScored 2026-11-07

Fix Fixed DiskStation Manager (DSM) (Synology): 7.1.1-42962-2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Synology	DiskStation Manager (DSM)	before 7.1.1-42962-2	7.1.1-42962-2	Patch available	CNA

DiskStation Manager (DSM) VendorSynology Affected before 7.1.1-42962-2 Fixed in 7.1.1-42962-2 Patch available CNA

CPE configurations NVD · 4

CPE	Versions	Role	Vendor
cpe:2.3:o:synology:diskstation_manager::::::::	before 7.1.1-42962-2	Vulnerable	Synology
cpe:2.3:h:synology:ds3622xs\+:-:::::::*	not specified by NVD	Running on	Synology
cpe:2.3:h:synology:fs3410:-:::::::*	not specified by NVD	Running on	Synology
cpe:2.3:h:synology:hd6500:-:::::::*	not specified by NVD	Running on	Synology

cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:* Versions before 7.1.1-42962-2 Vulnerable ·Synology
cpe:2.3:h:synology:ds3622xs\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synology
cpe:2.3:h:synology:fs3410:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synology
cpe:2.3:h:synology:hd6500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Synology

Remediation

Fix · CNA DiskStation Manager (DSM) (Synology) Fixed in 7.1.1-42962-2

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Release · 2022-10-20
Synology DiskStation Manager (DSM) 7.1.1-42962-2
4 records Highest priority Priority MEDIUM 4 MEDIUM
Other records, highest priority first
- TI-2022-10606 Memory corruption in Synology DiskStation ManagerPriority MEDIUM 52
- TI-2022-10605 Memory corruption in Synology DiskStation ManagerPriority MEDIUM 52
- TI-2022-03291 Out-of-bounds read in Synology DiskStation ManagerPriority MEDIUM 41
Show all 4 records →

Timeline

2026-10-02 Threatist record created from CVE-2022-27626
2026-10-03 Alias added: GHSA-2gm7-4g69-r63q

References

Advisory 1

https://www.synology.com/security/advisory/Synology_SA_22_17

TI-2021-02242 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer… KEVCVSS 3.1HIGH 7.8
TI-2018-01076 Out-of-bounds write in Netatalk CVSS 3.1CRITICAL 9.8
TI-2017-10594 Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a… CVSS 3.1CRITICAL 9.8
TI-2013-05716 webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2… CVSS 2.0HIGH 10.0
TI-2021-19843 Out-of-bounds read in Samba CVSS 3.1HIGH 8.8
TI-2017-11636 Command injection in Synology DiskStation Manager CVSS 3.0HIGH 8.8

See all 96 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences