CVE-2013-6955
CVSS 2.0 Score 10.0 of 10 (high)
Details
Published Jan 9, 2014
Updated: Jan 14, 2025
CWE ID 264
Summary
CVE-2013-6955 is a vulnerability affecting Synology DiskStation Manager (DSM) versions 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1. This issue enables remote attackers to append data to arbitrary files using the SLICEUPLOAD X-TMP-FILE HTTP header in the webman/imageSelector.cgi program. By doing so, they can execute arbitrary code on the affected system. This vulnerability poses a significant risk to Synology users, necessitating immediate updates to mitigate the threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
Affected Vendors
- Synology