Lucene search
HistoryOct 26, 2022 - 10:15 a.m.
CVE-2022-43748
path traversal
synology presto file server
remote attackers
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
40.8%
Improper limitation of a pathname to a restricted directory (‘Path Traversal’) vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to write arbitrary files via unspecified vectors.
Affected configurations
Node
synologypresto_file_serverRange<2.1.2-1601
| Vendor | Product | Version | CPE |
|---|---|---|---|
| synology | presto_file_server | * | cpe:2.3:a:synology:presto_file_server:*:*:*:*:*:*:*:* |
Related
prion
prion
Path traversal
2022-10-26 10:15:00
cvelist
cvelist
CVE-2022-43748
2022-10-26 10:05:13
cve
cve
CVE-2022-43748
2022-10-26 10:15:17
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.001
Percentile
40.8%
Related for NVD:CVE-2022-43748