CVE-2022-49038 — Synology / Synology Drive Client

CVE-2022-49038

Synology / Synology Drive Client PUBLISHED

Description (CNA)

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.

Affected (CNA)

Vendor / product	Versions
Synology / Synology Drive Client	affected * before 3.5.0-16084

CWE

CWE-829

References

https://www.synology.com/en-global/security/advisory/Synology_SA_24_10

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.