CVE-2021-29087: Path Traversal
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to write arbitrary files via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-29087?
The severity of CVE-2021-29087 is high with a severity value of 7.5.
What is CVE-2021-29087?
CVE-2021-29087 is an 'Improper limitation of a pathname to a restricted directory (Path Traversal)' vulnerability in the webapi component in Synology DiskStation Manager (DSM) before version 6.2.3-25426-3.
How does CVE-2021-29087 impact Synology DiskStation Manager?
CVE-2021-29087 allows remote attackers to write arbitrary files via unspecified vectors, posing a security risk to the affected Synology DiskStation Manager (DSM) versions.
Which versions of Synology DiskStation Manager (DSM) are affected by CVE-2021-29087?
Versions of Synology DSM before 6.2.3-25426-3, including DiskStation Manager and Diskstation Manager Unified Controller versions up to 3.1-23033, are affected by CVE-2021-29087.
How can I fix CVE-2021-29087?
To fix CVE-2021-29087, it is recommended to update Synology DiskStation Manager (DSM) to version 6.2.3-25426-3 or later by following the instructions provided by Synology in their security advisory.