CVE-2022-27623

Summary

CVE-2022-27623 is a critical vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 7.1-42661. This issue involves missing authentication for a critical iSCSI management functionality, enabling remote attackers to gain unauthorized access to read or write arbitrary files on affected systems. With no authentication required, unauthorized users can potentially exploit this vulnerability to steal or modify sensitive data, causing significant security risks. Synology strongly advises users to update their DSM installations to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.