Maple Labs

CVE search · CVE-2022-49036

CVE-2022-49036

high 7.8

An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.

Open in the NVD CVE.org JSON

Details

Status
Analyzed
Published
Last changed
Source
security@synology.com
Weakness
CWE-829

Severity

VersionScoreVectorSource
CVSS 3.1 high 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H security@synology.comSecondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

  • synology · active_backup_for_business_recovery_media_creator

References