Lucene search
HistoryOct 26, 2022 - 10:15 a.m.
CVE-2022-43749
vulnerability
privilege management
synology presto file server
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
29.6%
Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security constraint via unspecified vectors.
Affected configurations
Node
synologypresto_file_serverRange<2.1.2-1601
| Vendor | Product | Version | CPE |
|---|---|---|---|
| synology | presto_file_server | * | cpe:2.3:a:synology:presto_file_server:*:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2022-43749
2022-10-26 10:15:18
prion
prion
Privilege escalation
2022-10-26 10:15:00
cvelist
cvelist
CVE-2022-43749
2022-10-26 10:05:08
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
29.6%
Related for NVD:CVE-2022-43749