CVE-2022-49041

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors...

CVE-2023-52949

Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...

CVE-2023-52949

Missing authentication for critical function vulnerability in proxy settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...

CVE-2023-52949

CVE-2023-52949 affects Synology Active Backup for Business Agent prior to 2.7.0-3221. The issue is a missing authentication for a critical function in the proxy settings, allowing local users to obtain credentials via unspecified vectors. CVSSv3.1 base metrics indicate a Local attack with Low com...

CVE-2023-52948

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...

CVE-2023-52948

CVE-2023-52948 concerns Synology Active Backup for Business Agent prior to version 2.7.0-3221, where a missing encryption of sensitive data in the settings functionality could allow local users to obtain user credentials via unspecified vectors. The CVSS 3.1 base metrics indicate Local attack vec...

CVE-2023-52947

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logo...

CVE-2023-52947

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logo...

CVE-2023-52947

CVE-2023-52947 affects Synology Active Backup for Business Agent prior to 2.6.3-3101, where a missing authentication in the logout function allows local users to log out the client via unspecified vectors. The backup process remains operational. Remediation: upgrade to 2.6.3-3101 or later. No exp...

CVE-2023-52950

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors...

CVE-2023-52950

CVE-2023-52950 affects Synology Active Backup for Business Agent’s login component. The root cause is missing encryption of sensitive data, enabling adjacent (local) attackers to perform MITM-style credential exposure via unspecified vectors. Impact is confined to confidentiality loss of user cre...

CVE-2023-52950

Missing encryption of sensitive data vulnerability in login component in Synology Active Backup for Business Agent before 2.7.0-3221 allows adjacent man-in-the-middle attackers to obtain user credential via unspecified vectors...

CVE-2022-49041

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

CVE-2022-49039

Affected software: Synology Drive Client (backup task management). The issue is an out-of-bounds write vulnerability in the backup task management functionality prior to version 3.4.0-15721. Exploitation requires local access with administrator privileges and can allow arbitrary command execution...

CVE-2022-49039

Out-of-bounds write vulnerability in backup task management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to execute arbitrary commands via unspecified vectors...

Synology Active Backup for Business Agent 安全漏洞

Synology Active Backup for Business Agent is a backup program from China-based Synology Inc. A security vulnerability exists in Synology Active Backup for Business Agent prior to version 2.7.0-3221, which stems from a lack of sensitive data encryption vulnerability in the Settings feature that...

Synology Active Backup for Business Agent 访问控制错误漏洞

Synology Active Backup for Business Agent is a backup program from China-based Synology Inc. An access control error vulnerability exists in Synology Active Backup for Business Agent versions prior to 2.7.0-3221, which stems from a lack of critical functionality authentication vulnerability in th...

CVE-2023-52947: Missing Authentication for Critical Function

Missing authentication for critical function vulnerability in logout functionality in Synology Active Backup for Business Agent before 2.6.3-3101 allows local users to logout the client via unspecified vectors. The backup functionality will continue to operate and will not be affected by the logo...

CVE-2023-52948: Missing Encryption of Sensitive Data

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...