VYPR
← All advisories
Medium severity5.9NVD Advisory· Published Jun 13, 2023· Updated Jun 17, 2026

CVE-2023-2729

CVE-2023-2729

Description

Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Synology/Diskstation Manager Unified Controller
    cpe:2.3:a:synology:diskstation_manager_unified_controller:3.1:*:*:*:*:*:*:*
  • Synology/Router Manager7 versions
    cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:synology:router_manager:*:*:*:*:*:*:*:*range: >=1.2,<1.3.1-9346
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:*:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_1:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_2:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_3:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_4:*:*:*:*:*:*
    • cpe:2.3:a:synology:router_manager:1.3.1-9346:update_5:*:*:*:*:*:*
  • Synology/Diskstation Manager3 versions
    cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*range: >=6.2,<7.2-64561
    • (no CPE)range: <7.2-64561
    • (no CPE)range: 7.2
  • Synology/Synology Router Manager (SRM)cpe-rescue
    Range: 1.3
  • Synology/Unified Controller (DSMUC)cpe-rescue
    Range: 3.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.