CVE-2021-33182

Summary

CVE-2021-33182 is a path traversal vulnerability affecting the PDF Viewer component in Synology DiskStation Manager (DSM) versions prior to 6.2.4-25553. This issue permits remote, authenticated users to access limited files by traversing beyond the intended directory. The specific vectors of attack are unspecified, adding to the potential severity of this vulnerability. Successful exploitation could result in unauthorized file reading, potentially leading to sensitive data exposure. It is essential for Synology users to update their DSM installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.