medium5.9
CVE-2023-2729
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attacke…
Impact
Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Diskstation Manager Unified Controller | Version 3.1 |
| Synology | Router Manager | from 1.2 before 1.3.1-9346 Version 1.3.1-9346 |
| Synology | Diskstation Manager | from 6.2 before 7.2-64561 |
References
- NVD record
- CVE.org record
- https://www.synology.com/en-global/security/advisory/Synology_SA_23_07
- https://www.synology.com/en-global/security/advisory/Synology_SA_23_08
- https://www.synology.com/en-global/security/advisory/Synology_SA_23_07
- https://www.synology.com/en-global/security/advisory/Synology_SA_23_08