CVE-2017-9553

Published: Jul 24, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM

x_refsource_CONFIRM

https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2017-9553

Description

Affected Products

References