Synology DiskStation Manager Unified Controller (DSM UC)

CPE Details

Synology DiskStation Manager Unified Controller (DSM UC)
synology
diskstation_manager_unified_controller
-
2021-06-29
11h53 +00:00
2021-08-17
12h49 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:o:synology:diskstation_manager_unified_controller:-:*:*:*:*:*:*:*

Informations

Vendor

synology

Product

diskstation_manager_unified_controller

Version

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2022-22687 2022-03-25 06h55 +00:00 Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.
9.8
Critique
CVE-2021-29084 2021-06-23 09h55 +00:00 Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in Security Advisor report management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.
7.5
Haute
CVE-2021-29085 2021-06-23 09h55 +00:00 Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.
8.6
Haute
CVE-2021-29087 2021-06-23 09h55 +00:00 Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors.
7.5
Haute
CVE-2021-27649 2021-06-23 09h50 +00:00 Use after free vulnerability in file transfer protocol component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.
9.8
Critique
CVE-2021-29086 2021-06-23 09h50 +00:00 Exposure of sensitive information to an unauthorized actor vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to obtain sensitive information via unspecified vectors.
7.5
Haute