CVE-2022-22688: Command Injection

Q: What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2022-22688.

Q: What is the severity of CVE-2022-22688?

The severity of CVE-2022-22688 is high with a severity value of 8.8.

Q: Which software is affected by CVE-2022-22688?

Synology DiskStation Manager (DSM) versions before 6.2.4-25556-2 and 7.0.1-42214 are affected.

Q: How does CVE-2022-22688 affect the affected software?

CVE-2022-22688 allows remote authenticated users to execute arbitrary commands in Synology DiskStation Manager (DSM) before 6.2.4-25556-2 and 7.0.1-42214.

Q: How can the vulnerability CVE-2022-22688 be fixed?

Update Synology DiskStation Manager (DSM) to version 6.2.4-25556-2 or 7.0.1-42214 to fix the vulnerability.

Published Mar 25, 2022

Updated

Improper neutralization of special elements used in a command ('Command Injection') vulnerability in File service functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-2 allows remote authenticated users to execute arbitrary commands via unspecified vectors.

Affected Software

3 affected components

Synology Diskstation Manager>=6.2<6.2.4-25556-2

Synology Diskstation Manager>=7.0<7.0.1-42214

Synology Diskstation Manager>=6.2<6.2.4-25556-2

Event History

Mar 25, 2022

CVE Published

via MITRE·06:55 AM

Data Sourced

via MITRE·06:55 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2022-22688.

What is the severity of CVE-2022-22688?

The severity of CVE-2022-22688 is high with a severity value of 8.8.

Which software is affected by CVE-2022-22688?