CVE-2022-22683

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary code via unspecified vectors.

Score

CVSS 3.1 10.0 Critical

Status

Modified - security@synology.com

Published

2022-07-28

Last modified

2024-09-16

Weaknesses

CWE-120

Affected products

• Media Server (Synology)

References

• https://www.synology.com/security/advisory/Synology_SA_20_24