Synology Presto File Server vulnerabilities

2 CVEs affecting Synology Presto File Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-43749, published 2022-10-26.

More from Synology.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-43748, published 2022-10-26. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file operation management in Synology Presto File Server before 2.1.2-1601 allows remote attackers to…
• CVE-2022-43749, published 2022-10-26. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security constraint via…