PT-2022-15634 · Synology · Synology Diskstation Manager

Andrey Lovyannikov

+1

·

CVE-2022-22688

·

Published

2022-03-25

·

Updated

2025-01-14

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager (DSM) versions prior to 6.2.4-25556-2
Description The issue is related to improper neutralization of special elements used in a command, allowing remote authenticated users to execute arbitrary commands via unspecified vectors. This affects the File service functionality.
Recommendations For versions prior to 6.2.4-25556-2, update to version 6.2.4-25556-2 or later to resolve the issue.

Fix

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2022-22688

Affected Products

Synology Diskstation Manager