NetSight
critical9.8

CVE-2022-22687

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) befo…

Impact

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in Authentication functionality in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

VendorProductAffected versions
SynologyDiskstation Manager
from 6.2 before 6.2.3-25426-3
SynologyDiskstation Manager Unified Controller
before 3.1-23033

Weakness classification

References