CVE-2021-26563

CVSS 3.1 Score 6.7 of 10 (medium)

Details

Published Feb 26, 2021
Updated: Jan 14, 2025
CWE ID 863

Summary

CVE-2021-26563 is an authorization vulnerability affecting the synoagentregisterd component in Synology DiskStation Manager (DSM) prior to version 6.2.4-25553. This issue enables local users to gain unauthorized access and execute arbitrary code. The precise attack vectors are undisclosed, but exploitation could potentially lead to significant security risks for impacted systems. Synology strongly advises users to update their DSM versions to mitigate this issue and maintain a secure environment.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • DiskStation Manager
  • Synology Diskstation Manager Unified Controller

Affected Vendors

  • Synology

Advisories, Assessments, and Mitigations