CVE-2022-27610

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology DiskStation Manager DSM before 6.2.3-25423 allows remote authenticated users to delete arbitrary files via unspecified vectors...

CVE-2022-27610

The CVE-2022-27610 entry describes a path traversal vulnerability in the webapi component of Synology DiskStation Manager (DSM) prior to 6.2.3-25423. The flaw allows remote authenticated users to delete arbitrary files via unspecified vectors, due to improper limitation of a pathname to a restric...

Synology DiskStation Manager 路径遍历漏洞

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. The operating system manages information such as data, files, photos, music, and more. A path traversal vulnerability exists in Synology DiskStation Manager DSM, whi...

PT-2022-18515 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.3-25423 Description: The issue is related to a Path Traversal vulnerability in the webapi component. This allows remote authenticated users to delete arbitrary files. Recommendations: For...

Vulnerability fixed in Synology DiskStation Manager

Synology has fixed a vulnerability in Diskstation Manager. The vulnerability is located in the webapi component of DiskStation Manager. An authenticated malicious party can perform a path traversal attack that results in the following categories of damage: Denial-of-Service DoS. Manipulation of...

CVE-2022-27610

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology DiskStation Manager DSM before 6.2.3-25423 allows remote authenticated users to delete arbitrary files via unspecified vectors...

Synology DiskStation Manager Command Injection Vulnerability (CNVD-2022-67853)

Synology DiskStation Manager DSM is an operating system for use on networked storage servers NAS from Synology Inc. in Taiwan, China. The operating system manages information such as data, files, photos, music and more. A command injection vulnerability exists in Synology DiskStation Manager DSM,...

Synology DiskStation Manager Buffer Overflow Vulnerability

Synology DiskStation Manager DSM is an operating system for use on Network Storage Servers NAS from Synology Inc. of Taiwan, China. This operating system manages information such as data, files, photos, music, and more. A buffer overflow vulnerability exists in Synology DiskStation Manager DSM,...

CVE-2022-22687

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in Authentication functionality in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2022-22688

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

CVE-2022-22688

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

Command injection

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

Buffer overflow

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in Authentication functionality in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2022-22687

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in Authentication functionality in Synology DiskStation Manager DSM before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2022-22687

CVE-2022-22687 is a buffer overflow in the Authentication component of Synology DiskStation Manager (DSM) prior to 6.2.3-25426-3. The issue (classic buffer overflow) allows remote attackers to execute arbitrary code via unspecified vectors. Exploitation details are not provided in the connected d...

CVE-2022-22688

Improper neutralization of special elements used in a command 'Command Injection' vulnerability in File service functionality in Synology DiskStation Manager DSM before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors...

PT-2022-15634 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.4-25556-2 Description: The issue is related to improper neutralization of special elements used in a command, allowing remote authenticated users to execute arbitrary commands via...

Synology DiskStation Manager命令注入漏洞

Synology DiskStation Manager DSM is an operating system for use on networked storage servers NAS from Synology Inc. in Taiwan, China. The operating system manages information such as data, files, photos, music and more. A command injection vulnerability exists in Synology DiskStation Manager DSM,...

PT-2022-15633 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 6.2.3-25426-3 Description: A buffer copy without checking the size of the input, also known as a 'Classic Buffer Overflow', exists in the Authentication functionality. This issue allows remot...

Synology DiskStation Manager SQL注入漏洞

Synology DiskStation Manager DSM is an operating system used on network storage servers NAS by Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in Synology DiskStation Manager, which stems from the failure of the product's Log Management function to handle special characters i...