CVE-2024-0854

Summary

CVE-2024-0854 is a newly disclosed vulnerability in Synology DiskStation Manager (DSM) affecting versions before 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7, and 7.2.1-69057-2. This issue involves an Open Redirect vulnerability in the file access component. Malicious actors can exploit this flaw, gaining access to untrusted sites, allowing them to carry out phishing attacks on remote, authenticated users. The specific vectors of attack are yet to be detailed. Users are advised to update their DSM software to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.