← CVE Intelligence

CVE-2025-13392

Synology / DiskStation Manager (DSM) PUBLISHED

Description (CNA)

Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote attackers to bypass authentication with prior knowledge of the distinguished name (DN).

Affected (CNA)

Vendor / productVersions
Synology / DiskStation Manager (DSM)affected 7.3 before 7.3.1-86003-1; affected 7.2.2 before 7.2.2-72806-5; unaffected 7.2.1 before 7.2.1.*; unknown 0 before 7.2.1

CWE

CWE-754

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.