Synology-SA-19:37 DSM

[jensmander]

Multiple vulnerabilities allow remote authenticated users to execute arbitrary commands or conduct denial-of-service attacks, or allow remote attackers to delete arbitrary files via a susceptible version of DiskStation Manager (DSM).

 

Note: Synology recommends to update DSM to 6.2.2-24922-4. Before updating please check the updates report section. If your system is not open to the internet (NAT, port forwarding, QuickConnect, etc.) you should be safe.

 

Further infos on Synology website.

[polanskiman]

Thank you for this warning. An announcement has be made and posted.

[advin]

Thank you for this warning.