PT-2017-19013 · Synology · Synology Diskstation Manager
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Synology DiskStation Manager (DSM) versions prior to 6.1.3-15152
Description
A design flaw in SYNO.API.Encryption allows remote attackers to bypass the encryption protection mechanism via the crafted
version parameter.Recommendations
For versions prior to 6.1.3-15152, update to version 6.1.3-15152 or later to resolve the issue. As a temporary workaround, consider restricting access to the SYNO.API.Encryption module to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Synology Diskstation Manager