Approved changes feed: RSS · Atom

cpe:2.3:o:synology:diskstation_manager:4.2:*:*:*:*:*:*:*

part: o version: 4.2 update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductDiskstation Manager (db429775-8112-5c04-a3e0-3177c21cf9b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-6955 vulnerable 2026-06-03 14:33:33.129044 Details available
webman/imageSelector.cgi in Synology DiskStation Manager (DSM) 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 allows remote attackers to append data to arbitrary files, and consequently execute arbitrary code, via a pathname in the SLICEUPLOAD X-TMP-FILE HTTP header.
Published: 2014-01-09T11:00:00.000Z
Updated: 2024-08-06T17:53:45.550Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.