Description (CNA)
Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / DiskStation Manager (DSM) | affected before 5.2-5967-5 |
CWE
CWE-77
References
- https://www.synology.com/en-global/support/security/Synology_SA_17_65_DSM
- http://packetstormsecurity.com/files/157807/Synology-DiskStation-Manager-smart.cgi-Remote-Command-Execution.html
ADP enrichment
No English description supplied.