PT-2022-18519 · Synology · Synology Media Server

Published 2022-07-28 · Updated 2025-01-14 · CVE-2022-27614

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Synology Media Server versions prior to 1.8.1-2876

Description The issue allows remote attackers to obtain sensitive information via unspecified vectors, resulting in the exposure of sensitive information to unauthorized actors.

Recommendations For Synology Media Server versions prior to 1.8.1-2876, update to version 1.8.1-2876 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2022-27614

Affected Products

Synology Media Server

References · 5

• https://osv.dev/vulnerability/CVE-2022-27614 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27614 · Security Note
• https://synology.com/security/advisory/Synology_SA_20_24 · Vendor Advisory
• https://t.me/cibsecurity/47185 · Telegram Post
• https://t.me/cvenotify/33887 · Telegram Post