CVE-2022-27623 in DSM

Sumário

de MITRE • 25/10/2022

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: Synology Inc.
• Reservar: 21/03/2022
• Divulgação: 25/10/2022
• Moderação: aceite
• Entrada: VDB-212183
• CPE: pronto
• CWE: CWE-306 (confirmado)
• CVSS: 9.1 (NVD)
• EPSS: 0.00753
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-27623
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-27623
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-27623/