Vulnerability in DSM 6.2: Synology-SA-20:26

[jensmander]

This affects users who have their NAS exposed to the internet (NAT, open ports). It‘s fixed in DSM 6.2.3-25426-3 .

 

Description

 

Multiple vulnerabilities allow remote attackers to execute arbitrary code via a susceptible version of DiskStation Manager (DSM).

 

https://www.synology.com/en-global/security/advisory/Synology_SA_20_26

[Mincemeat]

Got a 6.2.2-24922u6 connected over ics in win10 and it seems ports 5k and 22 are closed from outside so it should be ok?

 

Thats pretty bad, out of the blue multiple remote vulnerabilities.