CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It may be remotely exploitable. It involves a SQL injection risk.
CVE
CVE-2021-29089
Severity
CRITICAL
CVSS
9.8
EPSS
1.93%
Original NVD Description
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.
Related CVEs
Other vulnerabilities affecting the same vendor(s)