CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 10.0. It may be remotely exploitable.
CVE
CVE-2022-27626
Severity
CRITICAL
CVSS
10
EPSS
1.03%
Original NVD Description
A vulnerability regarding concurrent execution using shared resource with improper synchronization ('Race Condition') is found in the session processing functionality of Out-of-Band (OOB) Management. This allows remote attackers to execute arbitrary commands via unspecified vectors. The following models with Synology DiskStation Manager (DSM) versions before 7.1.1-42962-2 may be affected: DS3622xs+, FS3410, and HD6500.
Related CVEs
Other vulnerabilities affecting the same vendor(s)