CVE-2021-27646

Summary

CVE-2021-27646 is a Use After Free vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 6.2.3-25426-3. This issue occurs in the iscsi_snapshot_comm_core function and allows remote attackers to execute arbitrary code by sending crafted web requests. The Use After Free condition arises when a memory location is freed before being fully utilized, leaving it vulnerable to manipulation. Attackers can exploit this vulnerability to inject malicious code, potentially leading to unauthorized access or data theft on the affected Synology DiskStations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.