Security Alert (A22-11-04): Multiple Vulnerabilities in Synology DiskStation Manager

Description:

Synology has published a security advisory to address multiple vulnerabilities in various versions of DiskStation Manager (DSM). The list of security updates can be found at:
https://www.synology.com/zh-hk/security/advisory/Synology_SA_22_18

Affected Systems:

• Synology DiskStation Manager (DSM)

Impact:

Depending on the vulnerabilities being exploited, a successful exploitation of the vulnerabilities could lead to information disclosure or tampering on an affected system.

Recommendation:

Patches for affected products are available. System administrators of affected products should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.synology.com/zh-hk/security/advisory/Synology_SA_22_18
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27622 (to CVE-2022-27623)