CVE-2022-22688

Summary

CVE-2022-22688 is a Command Injection vulnerability affecting Synology DiskStation Manager (DSM) before version 6.2.4-25556-2. This issue allows remote, authenticated users to execute arbitrary commands by improperly neutralizing special elements in the File service functionality. The exact vectors of attack are unspecified, but successful exploitation could lead to serious consequences, such as unauthorized system access or data theft. Users are strongly encouraged to update their Synology DSM installations to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.