Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-2729

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user cre

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology DiskStation Manager (DSM)

Default version status: affected

  • 7.2 to < 7.2-64561affected
  • 7.1 to < 7.1.*affected
  • 7.0 to < 7.0.*affected
  • 6.2 to < 6.2.*affected
  • 0 to < 6.2unknown

Synology Unified Controller (DSMUC)

Default version status: affected

  • 3.1 to < 3.1.*affected
  • 0 to < 3.1unknown

Synology Synology Router Manager (SRM)

Default version status: affected

  • 1.3 to < 1.3.*affected
  • 1.2 to < 1.2.*affected
  • 0 to < 1.2unknown

References