CVE-2021-43927

Summary

CVE-2021-43927 is a vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 7.0.1-42218-2. This issue involves improper handling of SQL commands, leading to an SQL injection vulnerability in the Security Management functionality. Attackers can exploit this weakness to inject malicious SQL commands remotely, potentially gaining unauthorized access or executing harmful actions on the affected system. This type of attack can result in significant data loss or system compromise. It is recommended that users update their DSM installations to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.