CVE-2023-0142

8.1HIGH

Key Information

Vendor: Synology
Status: DiskStation Manager (DSM); Unified Controller (DSMUC); Synology Router Manager (SRM)
Vendor: CVE Published:; 13 June 2023

Summary

Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors.

Affected Version(s)

DiskStation Manager (DSM) <= 7.2

DiskStation Manager (DSM) >= 7.2.*

DiskStation Manager (DSM) < 7.1-42661

CVSS V3.1

Score:

8.1

Severity:

HIGH

Confidentiality:

High

Integrity:

High

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 13, 2023
Vulnerability Reserved.
Jan 10, 2023

Collectors

NVD DatabaseMitre Database

Credit

Chanyoung So