CVE-2022-27621

Name of the Vulnerable Software and Affected Versions Synology USB Copy versions prior to 2.2.0-1086

Description The issue is related to a Path Traversal vulnerability in the webapi component, allowing remote authenticated users to read or write arbitrary files via unspecified vectors.

Recommendations For versions prior to 2.2.0-1086, update to version 2.2.0-1086 or later to resolve the issue. As a temporary workaround, consider restricting access to the webapi component to minimize the risk of exploitation.