CVE-2022-27621

🗓️ 03 Aug 2022 05:55:11Reported by synologyType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 57 Views

Improper limitation of a pathname in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors

Reporter	Title	Published	Views	Family All 9
ATTACKERKB	CVE-2022-27621	2 Aug 202216:26	–	attackerkb
CNNVD	Synology USB Copy 路径遍历漏洞	3 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-27621	3 Aug 202205:55	–	cvelist
EUVD	EUVD-2022-32122	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in Synology products	3 Aug 202200:00	–	ncsc
NVD	CVE-2022-27621	3 Aug 202206:15	–	nvd
OSV	CVE-2022-27621	3 Aug 202206:15	–	osv
Prion	Path traversal	3 Aug 202206:15	–	prion
Positive Technologies	PT-2022-18527 · Synology · Synology Usb Copy	3 Aug 202200:00	–	ptsecurity

NVD

Node

synology usb_copyRange<2.2.0-1086

AND

synology diskstation_managerMatch6.2

synology diskstation_managerMatch7.0

synology diskstation_managerMatch7.1

[
  {
    "product": "USB Copy",
    "vendor": "Synology",
    "versions": [
      {
        "lessThan": "2.2.0-1086",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]