CVE-2021-29083
CVSS 3.1 Score 7.2 of 10 (high)
Details
Published Apr 1, 2021
Updated: Jan 14, 2025
CWE ID 78
Summary
CVE-2021-29083 is a vulnerability affecting Synology DiskStation Manager (DSM) before version 6.2.3-25426-3. This issue involves improper neutralization of special elements in the SYNO.Core.Network.PPPoE module. Authenticated remote users can exploit this weakness by manipulating the realname parameter, enabling them to execute arbitrary code. This vulnerability poses a significant risk, as it allows unauthorized code execution and could potentially lead to serious system compromises.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
Affected Vendors
- Synology