Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Diskstation_manager_unified_controller | Synology | 3.1 (including) | 3.1 (including) |
| Router_manager | Synology | 1.2 (including) | 1.3.1-9346 (excluding) |
| Router_manager | Synology | 1.3.1-9346 (including) | 1.3.1-9346 (including) |
| Router_manager | Synology | 1.3.1-9346-update_1 (including) | 1.3.1-9346-update_1 (including) |
| Router_manager | Synology | 1.3.1-9346-update_2 (including) | 1.3.1-9346-update_2 (including) |
| Router_manager | Synology | 1.3.1-9346-update_3 (including) | 1.3.1-9346-update_3 (including) |
| Router_manager | Synology | 1.3.1-9346-update_4 (including) | 1.3.1-9346-update_4 (including) |
| Router_manager | Synology | 1.3.1-9346-update_5 (including) | 1.3.1-9346-update_5 (including) |
| Diskstation_manager | Synology | 6.2 (including) | 7.2-64561 (excluding) |