Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.
[
{
"product": "DiskStation Manager (DSM)",
"vendor": "Synology",
"versions": [
{
"status": "affected",
"version": "before 5.2-5967-5"
}
]
}
]