CVE-2022-27621
CVSS 3.1 Score 3.8 of 10 (low)
Details
Published Aug 3, 2022
Updated: Jan 14, 2025
CWE ID 22
Summary
CVE-2022-27621 is a Path Traversal vulnerability affecting Synology's USB Copy webapi component before version 2.2.0-1086. This issue enables remote authenticated users to read or write arbitrary files by bypassing restrictions on directory paths. The vulnerability is not limited to specific vectors, posing a significant risk to the affected system's security. Successful exploitation could lead to unintended data exposure or modification. Users are advised to update their USB Copy installation to the latest version to mitigate this issue.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.