CVE-2022-27624

🗓️ 20 Oct 2022 05:50:20Reported by synologyType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 71 Views

Vulnerability in packet decryption of OOB Management allows remote attackers to execute arbitrary commands

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-27624	7 May 202515:22	–	circl
CNNVD	Synology DiskStation Manager 缓冲区错误漏洞	20 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-27624	20 Oct 202205:50	–	cvelist
EUVD	EUVD-2022-32125	3 Oct 202520:07	–	euvd
NVD	CVE-2022-27624	20 Oct 202206:15	–	nvd
OpenVAS	Synology DiskStation Manager (DSM) < 7.1.1-42962-2 Multiple Vulnerabilities (Synology-SA-22:17) - Remote Known Vulnerable Versions Check	14 Nov 202200:00	–	openvas
OpenVAS	Synology DiskStation Manager (DSM) < 7.1.1-42962-2 Multiple Vulnerabilities (Synology-SA-22:17) - Unreliable Remote Version Check	14 Nov 202200:00	–	openvas
Prion	Out-of-bounds	20 Oct 202206:15	–	prion
Positive Technologies	PT-2022-18530 · Synology · Synology Diskstation Manager	20 Oct 202200:00	–	ptsecurity
Tenable Nessus	Synology DiskStation Manager Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2022-27624)	1 Oct 202400:00	–	nessus

NVD

Node

synology diskstation_managerRange<7.1.1-42962-2

AND

synology ds3622xs+Match-

synology fs3410Match-

synology hd6500Match-

[
  {
    "vendor": "Synology",
    "product": "DiskStation Manager (DSM)",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "7.1.1-42962-2",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
synology	www.synology.com/security/advisory/Synology_SA_22_17