Got a Synology NAS? Time to check your updates, as two high-level vulnerabilities let ne’er-do-wells read and write files and conduct DDOS attacks
Big oof.
A recent cybersecurity update highlights two critical vulnerabilities found in Synology's DiskStation Manager (DSM) operating system across various product versions. The first vulnerability, with a CVSS3 base score of 9.8, allows malicious actors to read or write arbitrary files and execute denial-of-service attacks. The second vulnerability, rated 8.6, enables attackers to bypass the login process.
These flaws can lead to unauthorized access, data manipulation, and denial-of-service attacks. Synology has promptly released patches to address these issues, urging users to update their systems immediately. This incident underscores the importance of staying vigilant and regularly updating all devices to protect against evolving threats in the ever-changing cybersecurity landscape.
Written by urgent.news from PC Gamer's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
