CVE-2021-26561

Summary

CVE-2021-26561 is a stack-based buffer overflow vulnerability affecting Synology DiskStation Manager (DSM) before version 6.2.3-25426-3. Malicious actors can exploit this issue during man-in-the-middle attacks, allowing them to execute arbitrary code by manipulating the syno_finder_site HTTP header in synoagentregisterd. This weakness poses a significant risk, potentially leading to unauthorized system access and data breaches. System administrators are strongly encouraged to upgrade their DSM installations to the latest version as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.