Synology · Synology Diskstation Manager · CVE-2024-45538
**Name of the Vulnerable Software and Affected Versions**
Synology DiskStation Manager (DSM) versions prior to 7.2.1-69057-2
Synology DiskStation Manager (DSM) versions 7.2.1-69057-2 through 7.2.2-72806
Synology Unified Controller (DSMUC) versions prior to 3.1.4-23079
**Description**
A Cross-Site Request Forgery (CSRF) issue exists in the WebAPI Framework of Synology DiskStation Manager (DSM) and Synology Unified Controller (DSMUC). This allows remote attackers to potentially execute arbitrary code through unspecified methods.
**Recommendations**
Update Synology DiskStation Manager (DSM) to version 7.2.1-69057-2 or later.
Update Synology DiskStation Manager (DSM) to version 7.2.2-72806 or later.
Update Synology Unified Controller (DSMUC) to version 3.1.4-23079 or later.