VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026

CVE-2023-0142

CVE-2023-0142

Description

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Synology/Diskstation Manager Unified Controller
    cpe:2.3:a:synology:diskstation_manager_unified_controller:3.1:*:*:*:*:*:*:*
  • Synology/Router Manager7 versions
    cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*range: >=1.2,<1.3.1-9346
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:*:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_1:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_2:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_3:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_4:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_5:*:*:*:*:*:*
  • Synology/Diskstation Manager3 versions
    cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*range: >=6.2,<7.1-42661
    • (no CPE)range: <6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661
    • (no CPE)range: 7.1
  • Synology/Synology Router Manager (SRM)cpe-rescue
    Range: 1.3
  • Synology/Unified Controller (DSMUC)cpe-rescue
    Range: 3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.