High · published December 4, 2025
⚡ A sneaky out-of-bounds write vulnerability lurks in Synology's DiskStation Manager! This flaw can lead to disruptive denial-of-service attacks. 🔥 Think of it like a hotel that overbooks rooms, leading to chaos when guests arrive. Instead of accommodating everyone, some find themselves locked out, unable to get in! This vulnerability could allow remote attackers to crash your system, leaving legitimate users high and dry. A denial-of-service attack could mean lost access to critical data or services, impacting your productivity and peace of mind.
Think of it like a hotel that overbooks rooms, leading to chaos when guests arrive. Instead of accommodating everyone, some find themselves locked out, unable to get in! The out-of-bounds write vulnerability in the CGI components of Synology DSM and DSMUC permits unauthorized memory access, which can cause the application to crash or behave unexpectedly.
This vulnerability could allow remote attackers to crash your system, leaving legitimate users high and dry. A denial-of-service attack could mean lost access to critical data or services, impacting your productivity and peace of mind. To protect your systems, update Synology DSM to version 7.2.1-69057-2 or 7.2.2-72806, and if you're using DSMUC, make sure to upgrade to 3.1.4-23079 without delay. Regularly check for updates to stay on top of security. You've got this! Patch those systems and keep your data safe. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| synology/diskstation_manager | ≥ 7.2.1-69057, < 7.2.1-69057-2 | 7.2.1-69057-2 |
| synology/diskstation_manager | ≥ 7.2.2-72803, < 7.2.2-72806 | 7.2.2-72806 |
| synology/diskstation_manager_unified_controller | ≥ 3.1-23028, < 3.1.4-23079 | 3.1.4-23079 |