Uncontrolled search path element vulnerability in Backup Management Functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote authenticated users to read or write arbitrary files via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Diskstation_manager | Synology | 6.2 (including) | 7.1-42661 (excluding) |
| Diskstation_manager_unified_controller | Synology | 3.1 (including) | 3.1 (including) |
| Router_manager | Synology | 1.2 (including) | 1.3.1-9346 (excluding) |
| Router_manager | Synology | 1.3.1-9346 (including) | 1.3.1-9346 (including) |
| Router_manager | Synology | 1.3.1-9346-update_1 (including) | 1.3.1-9346-update_1 (including) |
| Router_manager | Synology | 1.3.1-9346-update_2 (including) | 1.3.1-9346-update_2 (including) |
| Router_manager | Synology | 1.3.1-9346-update_3 (including) | 1.3.1-9346-update_3 (including) |
| Router_manager | Synology | 1.3.1-9346-update_4 (including) | 1.3.1-9346-update_4 (including) |
| Router_manager | Synology | 1.3.1-9346-update_5 (including) | 1.3.1-9346-update_5 (including) |