CVE-2025-1021

High CVSS: 7.5

Missing authorization vulnerability in synocopy in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows remote attackers to read arbitrary files via unspecified vectors.

Vendor

Synology

Product

Diskstation Manager

CWE

CWE-862

Yayın Tarihi

2025-04-23 03:15:22

Güncelleme

2025-11-17 14:10:43

Source Identifier

security@synology.com

KEV Date Added

Kategoriler

CWE-862 Diskstation Manager HIGH Synology 2025

Referanslar

https://www.synology.com/en-global/security/advisory/Synology_SA_25_03

Benzer Kayıtlar

Medium

CVE-2026-3091

An uncontrolled search path element vulnerability in Synology Presto Client before 2.1.3-0672 allows local users to read…

Medium

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users…

High

CVE-2025-54159

Missing authorization vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 allows remote attack…

High

CVE-2025-54160

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology Bee…

High

CVE-2025-54158

Missing authentication for critical function vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-139…

Medium

CVE-2025-2848

A vulnerability in Synology Mail Server allows remote authenticated attackers to read and write non-sensitive settings,…