Test ID:	1.3.6.1.4.1.25623.1.0.114304
Category:	Web application abuses
Title:	Synology DiskStation Manager (DSM) Open Redirect Vulnerability (Synology-SA-24:02) - Remote Known Vulnerable Versions Check
Summary:	Synology DiskStation Manager (DSM) is prone to an open redirect; vulnerability.
Description:	Summary: Synology DiskStation Manager (DSM) is prone to an open redirect vulnerability. Vulnerability Insight: There is a URL redirection to untrusted site ('Open Redirect') vulnerability in the file access component. Vulnerability Impact: The flaw allows remote authenticated users to conduct phishing attacks via unspecified vectors. Affected Software/OS: Synology DSM prior to version 6.2.4-25556-8, 7.0.x prior to 7.0.1-42218-7, 7.1.x prior to 7.1.1-42962-7 and 7.2.x prior to 7.2.1-69057-2. Solution: Update to version 6.2.4-25556-8, 7.0.1-42218-7, 7.1.1-42962-7, 7.2.1-69057-2 or later. CVSS Score: 5.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-0854 Synology-SA-24:02 DSM https://www.synology.com/en-global/security/advisory/Synology_SA_24_02
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.