Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology DiskStation Manager (DSM) 7.1-42661 Clear all filters
TI-2022-10603 CVE-2022-27622 · GHSA-crr9-3x94-m79r

Server-side request forgery in Synology DiskStation Manager

Priority LOW 22

Server-Side Request Forgery (SSRF) vulnerability in Package Center functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to access intranet resources via unspecified vecto…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00817 Published 2022-10-25 Fixed in 7.1-42661 CWE-918
TI-2022-10604 CVE-2022-27623 · GHSA-7qq8-2p9r-p388

Missing authentication in Synology DiskStation Manager

Priority MEDIUM 43

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01019 Published 2022-10-25 Fixed in 7.1-42661 CWE-306