CVE-2022-49038CWE-829

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users…

High · published September 26, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
9.6
In the wild
Unconfirmed
What it is

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00202 · 9.6th percentile
Weakness
CWE-829 · Inclusion of Functionality from Untrusted Control Sphere
Published
2024-09-26T03:33Z
EPSS history
Timeline
  • 26 SEP 03:33Z
    Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users…
    cvelistv5