PT-2025-13167

CVE-2025-2848

·

Published

2025-03-27

·

Updated

2026-09-25

Description by

CVSS 2.0
6.5
Medium
MetricsAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Synology Mail Server versions prior to DSM 7.2/7.1
Description A vulnerability in Synology Mail Server allows authenticated users to tamper with system configurations, risking mail stability. The issue can be exploited by remote attackers, potentially compromising system configurations and service stability.
Recommendations Upgrade to secure systems running DSM 7.2/7.1 to resolve the issue. As a temporary workaround, consider restricting access to configuration settings until a patch is available.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾