Command injection

2022-02-0703:15:00

PRIOn knowledge base

www.prio-n.com

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.5%

JSON

Improper neutralization of special elements used in an OS command (‘OS Command Injection’) vulnerability in mail sending and receiving component in Synology Mail Station before 20211105-10315 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

CPENameOperatorVersion
mail_stationlt20211105

CPE	Name	Operator	Version
	mail_station	lt	20211105

References

www.synology.com/security/advisory/Synology_SA_21_28