CVE-2015-2809

CVSS 2.0 Score 5 of 10 (medium)

Details

Published Apr 1, 2015
Updated: Jan 14, 2025
CWE ID 200

Summary

CVE-2015-2809 is a vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 3.1. This issue arises from the Multicast DNS (mDNS) responder, which inadvertently answers unicast queries using non-link-local source addresses. An attacker can exploit this vulnerability to cause a denial-of-service through traffic amplification or potentially obtain sensitive information via UDP packets targeting the Avahi component on port 5353.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • DiskStation Manager

Affected Vendors

  • Synology

Advisories, Assessments, and Mitigations