CyberRota Analysis
AI-GeneratedAn improper neutralization of CRLF sequences vulnerability in the User API of Synology DiskStation Manager allows remote authenticated users to exploit the system, enabling them to read or write arbitrary files and potentially launch denial-of-service attacks after a reboot. Organizations using affected versions of DSM should prioritize patching to mitigate the risk of unauthorized access and system disruption. This is particularly critical for environments handling sensitive data or reliant on the availability of their storage solutions.
Original NVD Description
An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks after the system is rebooted.