NetSight
critical9.0

CVE-2021-26561

Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers t…

Impact

Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header.

Affected products

VendorProductAffected versions
SynologyDiskstation Manager
before 6.2.3-25426-3
SynologyVs960hd Firmware
All versions
SynologySkynas Firmware
All versions
SynologyDiskstation Manager Unified Controller
Version 3.0

Weakness classification

References