CVE-2023-2729

published 2023-06-13

CVE-2023-2729: Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote…

Priority P3 43 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.

Affected

11 ranges

Vendor	Product	Version range	Fixed in
synology	diskstation_manager	>= 6.2 < 6.2.*	6.2.*
synology	diskstation_manager	>= 6.2 < 7.2-64561	7.2-64561
synology	diskstation_manager	>= 7.0 < 7.0.*	7.0.*
synology	diskstation_manager	>= 7.1 < 7.1.*	7.1.*
synology	diskstation_manager	>= 7.2 < 7.2-64561	7.2-64561
synology	diskstation_manager_unified_controller	—	—
synology	router_manager	—	—
synology	router_manager	>= 1.2 < 1.3.1-9346	1.3.1-9346
synology	synology_router_manager	>= 1.2 < 1.2.*	1.2.*
synology	synology_router_manager	>= 1.3 < 1.3.*	1.3.*
synology	unified_controller	>= 3.1 < 3.1.*	3.1.*

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-330