Command injection

2019-04-0115:29:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.

CPENameOperatorVersion
diskstation_managerge5.2
diskstation_managerlt5.2
diskstation_managerge6.0
diskstation_managerlt6.0.3
diskstation_managerge6.1
diskstation_managerlt6.1.7
diskstation_managerge6.2
diskstation_managerlt6.2

Name	Operator	Version
diskstation_manager	ge	5.2
diskstation_manager	lt	5.2
diskstation_manager	ge	6.0
diskstation_manager	lt	6.0.3
diskstation_manager	ge	6.1
diskstation_manager	lt	6.1.7
diskstation_manager	ge	6.2
diskstation_manager	lt	6.2

References

www.synology.com/security/advisory/Synology_SA_18_33