Lucene search
HistoryJul 28, 2022 - 7:15 a.m.
CVE-2022-27612
buffer overflow
synology
audio station vulnerability
remote execution
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
33.0%
Buffer copy without checking size of input (‘Classic Buffer Overflow’) vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected configurations
Node
synologyaudio_stationRange<6.5.4-3367
| Vendor | Product | Version | CPE |
|---|---|---|---|
| synology | audio_station | * | cpe:2.3:a:synology:audio_station:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2022-27612
2022-07-28 07:10:12
prion
prion
Buffer overflow
2022-07-28 07:15:00
cve
cve
CVE-2022-27612
2022-07-28 07:15:07
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
33.0%
Related for NVD:CVE-2022-27612