← Back

CVE-2025-13392

nvd nist
Published: May 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Improper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-1 (7.2.1-69057 is not affected) allows remote attackers to bypass authentication with prior knowledge of the distinguished name (DN).

Affected (2)

Synology
1 product
Diskstation Manager
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Synology
Diskstation Manager
From 7.2.2 to 7.2.2-72806-5
Diskstation Manager
From 7.3 to 7.3.1-86003-1

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (1)

Source: security@synology.com
Vendor Advisory

Timeline

No history available yet.