CVE-2023-52948

Vulnerability

The settings functionality in Synology Active Backup for Business Agent before version 2.7.0-3221 does not encrypt sensitive data, allowing local users to obtain user credentials via unspecified vectors [1].

Exploitation

The attacker must have local access to the system where the affected agent is installed. No authentication is required to trigger the vulnerability, but user interaction is needed. The local user can exploit the missing encryption in the settings feature to retrieve stored credentials, without requiring elevated privileges or advanced network access [1].

Impact

Successful exploitation leads to the disclosure of user credentials, compromising confidentiality. The attacker gains access to sensitive authentication data, which could be used to further compromise the affected system or related services. The CVSSv3 base score is 5.0 (medium), with the attack vector being local and the scope unchanged [1].

Mitigation

Synology has released a fixed version 2.7.0-3221 of Active Backup for Business Agent. Users should upgrade to this version or later to remediate the vulnerability. No workaround is available. The advisory does not list this CVE in the known exploited vulnerabilities (KEV) catalog [1].