CVE-2021-26566
CVSS 3.1 Score 9 of 10 (high)
Details
Published Feb 26, 2021
Updated: Jan 14, 2025
CWE ID 201
CWE ID 200
Summary
CVE-2021-26566 is a sensitive information injection vulnerability affecting Synology DiskStation Manager (DSM) before version 6.2.3-25426-3. Maliciously crafted traffic using QuickConnect can exploit this issue, enabling man-in-the-middle attackers to execute arbitrary commands, potentially leading to unauthorized system access and compromise. This vulnerability poses a significant risk, particularly in environments with unsecured network connections, and requires immediate attention for patching and mitigation efforts.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
- Synology Diskstation Manager Unified Controller
Affected Vendors
- Synology