Design/Logic Flaw

2018-07-3014:29:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

JSON

Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.

CPENameOperatorVersion
diskstation_managereq< 6.2-23739

CPE	Name	Operator	Version
	diskstation_manager	eq	< 6.2-23739

References

www.synology.com/en-global/support/security/Synology_SA_18_39