[CVE-2022-49036] An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration i…

Descripción técnica

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.

Puntuación CVSS

Score: 7.8/10 — Severidad: HIGH — Estado NIST: Analyzed

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Productos afectados

Active backup for business recovery media creator — Synology

Debilidades (CWE)

CWE-829

Fuente oficial

Publicado en NIST NVD.