Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Release: Synology DiskStation Manager (DSM) 6.2.3-25426-3 Clear all filters
TI-2021-09971 CVE-2021-29084 · GHSA-487r-hmj9-h7h2

Injection in Synology DiskStation Manager

Priority LOW 36

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01332 Published 2021-06-23 Fixed in 6.2.3-25426-3 CWE-74
TI-2021-09972 CVE-2021-29085 · GHSA-m32f-99jg-48x9

Injection in Synology DiskStation Manager

Priority MEDIUM 40

Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remo…

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.01332 Published 2021-06-23 Fixed in 6.2.3-25426-3 CWE-74
TI-2021-09974 CVE-2021-29087 · GHSA-9977-6673-28cw

Path traversal in Synology DiskStation Manager

Priority LOW 36

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01396 Published 2021-06-23 Fixed in 6.2.3-25426-3 CWE-22
TI-2021-09100 CVE-2021-27649 · GHSA-59pm-73xx-3pvc

Use after free in Synology DiskStation Manager

Priority MEDIUM 46

Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02007 Published 2021-06-23 Fixed in 6.2.3-25426-3 CWE-416
TI-2021-09973 CVE-2021-29086 · GHSA-wgmc-67f7-2pmg

Information disclosure in Synology DiskStation Manager

Priority LOW 35

Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive information via unspecif…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01181 Published 2021-06-23 Fixed in 6.2.3-25426-3 CWE-200