CVE-2022-27623: Synology Diskstation Manager

Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Missing authentication for critical function vulnerability in iSCSI management functionality in Synology DiskStation Manager (DSM) before 7.1-42661 allows remote attackers to read or write arbitrary files via unspecified vectors.

Affected products

• Synology Diskstation Manager: before 7.1-42661 (fixed in 7.1-42661)

Published 2022-10-25. Last modified 2026-06-17.