CoreCVE
Back

HIGH

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors

Published Jul 28, 2022

Description

Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in task management component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner synology
Published Jul 28, 2022
Updated Sep 16, 2024
Reserved Jan 5, 2022
Link CVE-2022-22684

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-22684

Red Hat

No data

ENISA EUVD

Assigner synology
Published Jul 28, 2022
Updated Sep 16, 2024
Link EUVD-2022-27829

GitHub

No data