Unrated severityNVD Advisory· Published Mar 19, 2025· Updated Mar 19, 2025
CVE-2024-10444
CVE-2024-10444
Description
Improper certificate validation vulnerability in the LDAP utilities in Synology DiskStation Manager (DSM) before 7.1.1-42962-8, 7.2.1-69057-7 and 7.2.2-72806-3 allows man-in-the-middle attackers to hijack the authentication of administrators via unspecified vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2< 7.1.1-42962-8, < 7.2.1-69057-7, < 7.2.2-72806-3+ 1 more
- (no CPE)range: < 7.1.1-42962-8, < 7.2.1-69057-7, < 7.2.2-72806-3
- (no CPE)range: 7.2.2
Patches
Vulnerability mechanics
References
1- www.synology.com/en-global/security/advisory/Synology_SA_25_01mitrevendor-advisory
News mentions
0No linked articles in our index yet.