Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Synology DiskStation Manager (DSM) 6.2.3-25426-3 Clear all filters
TI-2021-09097 CVE-2021-27646 · GHSA-qm39-44mj-vqvq

Use after free in Synology DiskStation Manager

Priority MEDIUM 49

Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0392 Published 2021-03-12 Fixed in 6.2.3-25426-3 CWE-416
TI-2021-08292 CVE-2021-26569 · GHSA-xc56-v745-v4g3

Race condition in Synology DiskStation Manager

Priority MEDIUM 46

Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02253 Published 2021-03-12 Fixed in 6.2.3-25426-3 CWE-366
TI-2021-09098 CVE-2021-27647 · GHSA-vwc7-rhxw-hppq

Out-of-bounds read in Synology DiskStation Manager

Priority MEDIUM 48

Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03245 Published 2021-03-12 Fixed in 6.2.3-25426-3 CWE-125