CVE-2022-27626

Summary

CVE-2022-27626 is a race condition vulnerability affecting Synology DiskStation Manager (DSM) versions prior to 7.1.1-42962-2 on DS3622xs+, FS3410, and HD6500 models. The issue lies within the session processing functionality of Out-of-Band (OOB) Management, leading to arbitrary command execution for remote attackers through unspecified vectors due to improper synchronization. This weakness could potentially result in significant security risks. Users are strongly advised to update their Synology DSM software to the latest version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.