CVE-2017-9553 | BDVDB-2026-88052 Detail

Description#

A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.synology.com/en-global/support/security/Synology_SA_17_29_DSM
https://www.2-sec.com/2017/06/2-secs-expert-team-uncovers-new-vulnerability-popular-synology-nas-device/

Exploit#

No public exploit known

History#

Version 12017-07-24Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.