Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-3576

Опубликовано: 20 окт. 2022
Источник: nvd
CVSS3: 5.3
CVSS3: 7.5
EPSS Низкий

Описание

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*
Версия до 7.1.1-42962-2 (исключая)

Одно из

cpe:2.3:h:synology:ds3622xs\+:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:fs3410:-:*:*:*:*:*:*:*
cpe:2.3:h:synology:hd6500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 58%
0.00366
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125

Связанные уязвимости

CVSS3: 7.5
github
больше 3 лет назад

A vulnerability regarding out-of-bounds read is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to obtain sensitive information via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.

EPSS

Процентиль: 58%
0.00366
Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-125