First published: Fri Feb 26 2021(Updated: )
Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors.
Credit: security@synology.com
Affected Software | Affected Version | How to fix |
---|---|---|
Synology DiskStation Manager | <6.2.4-25553 | |
Synology Vs960hd Firmware | ||
Synology Vs960hd | ||
Synology Skynas Firmware | ||
Synology Skynas | ||
Synology Diskstation Manager Unified Controller | =3.0 | |
Synology Uc3200 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-26563 is an incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553, allowing local users to execute arbitrary code via unspecified vectors.
CVE-2021-26563 affects Synology DiskStation Manager before version 6.2.4-25553.
The severity of CVE-2021-26563 is high, with a severity score of 6.7.
To fix CVE-2021-26563, update Synology DiskStation Manager to version 6.2.4-25553 or later.
You can find more information about CVE-2021-26563 in the Synology security advisory and the Talos Intelligence vulnerability report.