Test ID:	1.3.6.1.4.1.25623.1.0.170911
Category:	Web application abuses
Title:	Synology DiskStation Manager (DSM) Multiple Vulnerabilities (Synology-SA-24:20) - Unreliable Remote Version Check
Summary:	Synology DiskStation Manager (DSM) is prone to multiple; vulnerabilities.
Description:	Summary: Synology DiskStation Manager (DSM) is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2024-10441: Improper encoding or escaping of output vulnerability in the system plugin daemon may allow remote attackers to execute arbitrary code via unspecified vectors. - CVE-2024-10445: Improper certificate validation vulnerability in the update functionality may allow remote attackers to write limited files via unspecified vectors. - CVE-2024-50629: Improper encoding or escaping of output vulnerability in the webapi component may allow remote attackers to read limited files via unspecified vectors. Affected Software/OS: Synology DSM prior to 7.1.1-42962-7, 7.2 prior to 7.2-64570-4, 7.2.1 prior to 7.2.1-69057-6 and 7.2.2 prior to 7.2.2-72806-1. Solution: Update to version 7.1.1-42962-7, 7.2-64570-4, 7.2.1-69057-6, 7.2.2-72806-1 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-10441 Common Vulnerability Exposure (CVE) ID: CVE-2024-10445 Common Vulnerability Exposure (CVE) ID: CVE-2024-50629
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.