CVE-2017-9553: High severity Synology Diskstation Manager vulnerability
A design flaw in SYNO.API.Encryption in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers to bypass the encryption protection mechanism via the crafted version parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Synology DiskStation Manager (DSM)to a version that resolves this vulnerability.Fixed in 6.1.3-15152
Event History
Frequently Asked Questions
What is the severity of CVE-2017-9553?
The severity of CVE-2017-9553 is rated as high with a score of 7.5.
How do I fix CVE-2017-9553?
To fix CVE-2017-9553, update Synology DiskStation Manager to version 6.1.3-15152 or later.
What access does CVE-2017-9553 allow an attacker?
CVE-2017-9553 allows remote attackers to bypass the encryption protection mechanism.
Which versions of Synology DiskStation Manager are affected by CVE-2017-9553?
Versions of Synology DiskStation Manager prior to 6.1.3-15152 are affected by CVE-2017-9553.
Is there a workaround for CVE-2017-9553?
There are no official workarounds for CVE-2017-9553; upgrading the software is recommended.