CVE-2022-22679: Path Traversal
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in support service management in Synology DiskStation Manager (DSM) before 7.0.1-42218-2 allows remote authenticated users to write arbitrary files via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Synology DiskStation Manager (DSM)to a version that resolves this vulnerability.Fixed in 7.0.1-42218-2
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-22679.
What is the severity level of CVE-2022-22679?
The severity level of CVE-2022-22679 is medium.
What software versions are affected by CVE-2022-22679?
Synology DiskStation Manager versions from 6.2 to 6.2.4-25556-3 and versions from 7.0 to 7.0.1-42218-2 are affected by CVE-2022-22679.
How does CVE-2022-22679 impact users?
CVE-2022-22679 allows remote authenticated users to write arbitrary files via unspecified vectors.
Where can I find more information about CVE-2022-22679?
You can find more information about CVE-2022-22679 on the Synology security advisory page: https://www.synology.com/security/advisory/Synology_SA_22_01