← Back

CVE-2022-49038

nvd nist
Published: Sep 26, 2024Modified: Oct 8, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Inclusion of functionality from untrusted control sphere vulnerability in OpenSSL DLL component in Synology Drive Client before 3.3.0-15082 allows local users to execute arbitrary code via unspecified vectors.

Affected (1)

Synology
1 product
Drive Client
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Drive Client
Before 3.3.0-15082

Related CWEs

CWE-829
Inclusion of Functionality from Untrusted Control Sphere
The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

References (1)

Source: security@synology.com
Vendor Advisory

Timeline

No history available yet.