← Database

CVE-2022-27623

HIGH CVSS: 7.4 Published: 2022-10-25 Modified: 2026-06-17

Description

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.

Affected Platforms

Synology Diskstation Manager

Weakness Type

CWE-306, CWE-306

References