Synology DiskStation Manager (DSM) < 7.1.1-42962-2 Multiple Vulnerabilities (Synology-SA-22:17) - Unreliable Remote Version Check

Multiple Synology NAS devices running DiskStation Manager DSM are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2022-27625

CVE-2022-27625 affects Synology DiskStation Manager (DSM) before 7.1.1-42962-2 on DSM models DS3622xs+, FS3410, and HD6500. The root cause is improper restriction of operations within the bounds of a memory buffer in the Out-of-Band (OOB) Management message processing functionality, enabling remo...

CVE-2022-27625

A vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of Out-of-Band OOB Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology...