Security Alert (A25-03-01): Vulnerability in Synology DiskStation Manager

Description:

Synology has published a security advisory to address a vulnerability in various versions of DiskStation Manager (DSM). The list of patches can be found at:
https://www.synology.com/en-us/security/advisory/Synology_SA_25_03

Affected Systems:

• Synology DiskStation Manager (DSM) 7.1 versions prior to 7.1.1-42962-8, 7.2.1 versions prior to 7.2.1-69057-7, and 7.2.2 versions prior to 7.2.2-72806-3

For detailed information of the affected systems, please refer to the corresponding security advisory at vendor's website.

Impact:

Successful exploitation of the vulnerability could lead to information disclosure on an affected system.

Recommendation:

System administrators of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.

More Information:

• https://www.synology.com/en-us/security/advisory/Synology_SA_25_03
• https://www.hkcert.org/security-bulletin/synology-products-multiple-vulnerabilities_20250303