CVE-2022-27623CWE-306

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows…

High · published October 25, 2022

CVSS v3.1
7.4
EPSS
1%
Percentile
63.0
In the wild
Unconfirmed
What it is

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.01019 · 63.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2022-10-25T16:30Z
EPSS history
Timeline
  • 25 OCT 16:30Z
    Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows…
    cvelistv5