CVE-2022-27624
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Oct 20, 2022
Updated: Jan 14, 2025
CWE ID 119
Summary
CVE-2022-27624 is a vulnerability affecting Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 on DS3622xs+, FS3410, and HD6500 models. The issue lies within the packet decryption functionality of Out-of-Band (OOB) Management, where operations are not properly restricted within memory buffers. This flaw allows remote attackers to execute arbitrary commands through unspecified vectors. By exploiting this defect, adversaries can gain unauthorized control over affected systems.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- DiskStation Manager
Affected Vendors
- Synology