CVE-2018-13280

2018-07-30T14:29:00
ID CVE-2018-13280
Type cve
Reporter cve@mitre.org
Modified 2019-10-09T23:34:00

Description

Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.