CVE-2022-49039

Summary

CVE-2022-49039 is an out-of-bounds write vulnerability affecting Synology Drive Client before version 3.4.0-15721. This issue allows local users with administrator privileges to execute arbitrary commands, exploiting a vulnerability in the backup task management functionality. The precise vectors of attack remain unspecified, but the impact of successful exploitation is significant, potentially granting attackers extensive control over affected systems. Users are advised to update to the latest version of Synology Drive Client to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.