Test ID:	1.3.6.1.4.1.25623.1.0.127290
Category:	General
Title:	Synology DiskStation Manager (DSM) 5.2.x, 6.x < 6.2-23739 Multiple Vulnerabilities (Synology_SA_18:24)
Summary:	Synology DiskStation Manager (DSM) is prone to multiple; vulnerabilities.
Description:	Summary: Synology DiskStation Manager (DSM) is prone to multiple vulnerabilities. Vulnerability Insight: The following vulnerabilities exist: - CVE-2017-12075: Command injection in EZ-Internet module allows remote authenticated users to execute arbitrary commands via the username parameter. - CVE-2018-8916: Unverified password change in Change Password allows remote authenticated users to reset password without verification. Affected Software/OS: Synology DSM version 5.2.x and 6.x prior to version 6.2-23739. Solution: Update to firmware version 6.2-23739 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-12075 Common Vulnerability Exposure (CVE) ID: CVE-2018-8916
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.