Code injection

2019-04-0115:29:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.4%

JSON

Channel accessible by non-endpoint vulnerability in privacy page in Synology Android Moments before 1.2.3-199 allows man-in-the-middle attackers to execute arbitrary code via unspecified vectors.

CPENameOperatorVersion
momentseq< 1.2.3-199

CPE	Name	Operator	Version
	moments	eq	< 1.2.3-199

References

www.synology.com/security/advisory/Synology_SA_18_52