high7.5
CVE-2018-13284
Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS comm…
Impact
Command injection vulnerability in ftpd in Synology Diskstation Manager (DSM) before 6.2-23739-1 allows remote authenticated users to execute arbitrary OS commands via the (1) MKD or (2) RMD command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Diskstation Manager | from 5.2 before 5.2-5967-8 from 6.0 before 6.0.3-8754-8 from 6.1 before 6.1.7-15284-1 from 6.2 before 6.2-23739-1 |