CVE-2022-27623

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.

Score

CVSS 3.1 9.1 Critical

Status

Modified - security@synology.com

Published

2022-10-25

Last modified

2025-05-07

Weaknesses

CWE-306

Affected products

• Diskstation Manager (Synology)
• Diskstation Manager Dsm (Synology)

References

• https://www.synology.com/security/advisory/Synology_SA_22_18