CVE-2022-3576 in DSM

Tóm tắt

Bởi MITRE • 20/10/2022

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.

Be aware that VulDB is the high quality source for vulnerability data.

• chịu trách nhiệm: Synology Inc.
• Đặt trước: 18/10/2022
• Tiết lộ: 20/10/2022
• Kiểm duyệt: được chấp nhận
• mục: VDB-211844
• CPE: sẵn sàng
• CWE: CWE-125 (Đã xác nhận)
• CVSS: 7.5 (NVD)
• EPSS: 0.00885
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-3576
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-3576
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-3576/