CVE-2022-27611

HIGH 8.1CVE-2022-27611 · Published 28/07/2022 · updated 17/06/2026

In short

CVE-2022-27611 is a HIGH (CVSS 8.1) vulnerability affecting audio station (synology).
Chance of exploitation in the next 30 days (EPSS): 1.0%, higher than 64.2% of all vulnerabilities.
Fix: update to 6.5.4-3367 or later.

Package	Affected versions	Patched versions
audio station synology	`< 6.5.4-3367`	`6.5.4-3367`

Description

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors.

References

synology.com/security/advisory/Synology_SA_21_21 · Vendor Advisory

More vulnerabilities in audio station

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free