CyberRota Analysis
AI-GeneratedThe vulnerability exists in the EventScheduler API of Synology DiskStation Manager, allowing remote authenticated users with administrator privileges to exploit SQL injection flaws. While the impact is categorized as low, it could enable unauthorized access to non-sensitive information. Organizations using affected DSM versions should prioritize patching to mitigate potential risks associated with this vulnerability.
Original NVD Description
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in EventScheduler API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users with administrator privileges to obtain non-sensitive information.