CVE-2021-34811

概要

参考情報

• synology.com/security/advisory/Synology_SA_21_11 · Vendor Advisory

download station のその他の脆弱性

• CVE-2021-34810高 8.8Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated use…
• CVE-2021-34809高 8.8Improper neutralization of special elements used in a command ('Command Injection') vulnerability in task management component in Synology D…
• CVE-2021-33184高 7.7Server-Side request forgery (SSRF) vulnerability in task management component in Synology Download Station before 3.8.15-3563 allows remote …
• CVE-2017-11156高 7.8Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 uses weak permissions (0777) for ui/dlm/btsearch directory, which …
• CVE-2017-11149中 6.5Server-side request forgery (SSRF) vulnerability in Downloader in Synology Download Station 3.8.x before 3.8.5-3475 and 3.x before 3.5-2984 …