Synology DiskStation Manager SYNO.API.Encryption API Protection Mechanism Bypass (CVE-2017-9553)

A design flaw in SYNO.API.Encryption in Synology DiskStation Manager DSM before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...

CVE-2017-9553

CVE-2017-9553 concerns a design flaw in Synology DiskStation Manager (DSM) SYNO.API.Encryption that, on DSM versions prior to 6.1.3-15152, allows remote attackers to bypass the encryption protection mechanism by sending a crafted version parameter. The issue affects DSM’s SYNO.API.Encryption comp...