CVE-2018-8920
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Dec 24, 2018
Updated: Jan 14, 2025
CWE ID 116
Summary
CVE-2018-8920 is a vulnerability affecting Synology DiskStation Manager (DSM) before version 6.1.6-15266. This issue involves an improper neutralization of escape sequence in the Log Exporter feature, enabling remote attackers to inject arbitrary content into exported CSV archives. The consequences of this vulnerability are unspecified but could potentially lead to significant impacts on affected systems. It is crucial for Synology users to update their DSM instances to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
Affected Vendors
- Synology