CVE-2024-10444

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager (DSM) versions prior to 7.1.1-42962-8 Synology DiskStation Manager (DSM) versions prior to 7.2.1-69057-7 Synology DiskStation Manager (DSM) versions prior to 7.2.2-72806-3

Description The issue is related to improper certificate validation in the LDAP utilities, allowing man-in-the-middle attackers to hijack the authentication of administrators.

Recommendations For versions prior to 7.1.1-42962-8, update to version 7.1.1-42962-8 or later. For versions prior to 7.2.1-69057-7, update to version 7.2.1-69057-7 or later. For versions prior to 7.2.2-72806-3, update to version 7.2.2-72806-3 or later.