CVE-2017-9553
First published: Mon Jul 24 2017(Updated: )
A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter.
Credit: security@synology.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Synology DiskStation Manager | <=6.1.1-15101-4 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2017-9553?
The severity of CVE-2017-9553 is rated as high with a score of 7.5.
How do I fix CVE-2017-9553?
To fix CVE-2017-9553, update Synology DiskStation Manager to version 6.1.3-15152 or later.
What access does CVE-2017-9553 allow an attacker?
CVE-2017-9553 allows remote attackers to bypass the encryption protection mechanism.
Which versions of Synology DiskStation Manager are affected by CVE-2017-9553?
Versions of Synology DiskStation Manager prior to 6.1.3-15152 are affected by CVE-2017-9553.
Is there a workaround for CVE-2017-9553?
There are no official workarounds for CVE-2017-9553; upgrading the software is recommended.
- collector/nvd-index
- vendor/synology
- product/diskstation manager
- canonical/synology diskstation manager