Synology Products Multiple Vulnerabilities

Multiple vulnerabilities were identified in Synology products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege and remote code execution on the targeted system.

Impact

• Remote Code Execution
• Denial of Service
• Elevation of Privilege

System / Technologies affected

• Synology DSM 7.2.2 versions prior to 7.2.2-72806
• Synology DSM 7.2.1 versions prior to 7.2.1-69057-2
• Synology DSMUC 3.1 versions prior to 3.1.4-23079

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• https://www.synology.com/en-global/security/advisory/Synology_SA_24_27

Source link