Synology-SA-22:23 PWN2OWN TORONTO 2022

Publish Time: 2022-12-08 16:57:24 UTC+8

Last Updated: 2023-01-04 17:53:31 UTC+8

Severity
Important
Status
Ongoing

Abstract

Multiple vulnerabilities reported by PWN2OWN TORONTO 2022 have been addressed.

Affected Products

Product Severity Fixed Release Availability
DSM 7.1 Important Upgrade to 7.1.1-42962-3 or above.
DSM 7.0 Important Upgrade to 7.0.1-42218-6 or above.
DSM 6.2 Important Ongoing
SRM 1.3 Important Upgrade to 1.3.1-9346-3 or above.
SRM 1.2 Important Upgrade to 1.2.5-8227-6 or above.

Mitigation

None

Detail

Reserved

Acknowledgement

  • ASU SEFCOM

  • Claroty Research

Reference

PWN2OWN TORONTO 2022

Revision

Revision Date Description
1 2022-12-08 Initial public release.
2 2022-12-22 Update for SRM 1.3 and SRM 1.2 is now available in Affected Products.
3 2023-01-04 Update for DSM 7.0 is now available in Affected Products.