Synology Security Synology-SA-22:10 Samba

[Synology RSS]

CVE-2022-32742 allows remote authenticated users to obtain sensitive information via a susceptible version of Synology DiskStation Manager (DSM), Synology Router Manager (SRM) and SMB Service. CVE-2022-2031, CVE-2022-32744, and CVE-2022-32746 allow remote authenticated users to bypass security constraint and conduct denial-of-service attacks via a susceptible version of Synology Directory Server. None of Synology's products are affected by CVE-2022-32745 as this vulnerability only affect Samba 4.13 and later.

Continue reading...
- - -
Source: synology.com