Lucene search
HistoryJul 28, 2022 - 8:15 a.m.
CVE-2022-27611
cve-2022-27611
path traversal
synology audio station
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
26.5%
Improper limitation of a pathname to a restricted directory (‘Path Traversal’) vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors.
Affected configurations
Node
synologyaudio_stationRange<6.5.4-3367
| Vendor | Product | Version | CPE |
|---|---|---|---|
| synology | audio_station | * | cpe:2.3:a:synology:audio_station:*:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2022-07-28 08:15:00
cve
cve
CVE-2022-27611
2022-07-28 08:15:08
cvelist
cvelist
CVE-2022-27611
2022-07-28 07:10:28
CVSS3
8.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
EPSS
0.001
Percentile
26.5%
Related for NVD:CVE-2022-27611