CVE-2021-29085: High severity Synology Diskstation Manager vulnerability
Published Jun 23, 2021
·Updated
Improper neutralization of special elements in output used by a downstream component ('Injection') vulnerability in file sharing management component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to read arbitrary files via unspecified vectors.
Affected Software
3 affected components
Synology Diskstation Manager>=6.2<6.2.3-25426-3
Synology Diskstation Manager Unified Controller<3.1-23033
Synology Diskstation Manager>=6.2<6.2.3-25426-3
Event History
Jun 23, 2021
CVE Published
via MITRE·09:55 AM
Data Sourced
via MITRE·09:55 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2021-29085.
2
What is the severity of CVE-2021-29085?
The severity of CVE-2021-29085 is high.
3
What is the affected software?
The affected software is Synology DiskStation Manager (DSM) versions before 6.2.3-25426-3 and Synology Diskstation Manager Unified Controller version up to 3.1-23033.
4
How does CVE-2021-29085 impact users?
CVE-2021-29085 allows remote attackers to read arbitrary files via unspecified vectors.
5
How can I fix CVE-2021-29085?
To fix CVE-2021-29085, users should update Synology DiskStation Manager to version 6.2.3-25426-3 or later.