CVE-2022-27621: Path Traversal
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Synology USB Copyto a version that resolves this vulnerability.Fixed in 2.2.0-1086
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-27621.
What is the severity of CVE-2022-27621?
The severity of CVE-2022-27621 is medium.
Which component is affected by CVE-2022-27621?
The webapi component in Synology USB Copy before 2.2.0-1086 is affected by CVE-2022-27621.
How can remote authenticated users exploit CVE-2022-27621?
Remote authenticated users can exploit CVE-2022-27621 to read or write arbitrary files via unspecified vectors.
Is Synology DiskStation Manager vulnerable to CVE-2022-27621?
No, Synology DiskStation Manager versions 6.2, 7.0, and 7.1 are not vulnerable to CVE-2022-27621.