Description (CNA)
Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / DiskStation Manager (DSM) | affected unspecified before 6.2-23739 |
CWE
CWE-330
References
ADP enrichment
No English description supplied.