Audio Station vulnerabilities

2 known vulnerabilities in Audio Station from Synology. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Audio Station: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-27611Jul 28, 2022SynologyEPSS 1.05%

  Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors.

• 9.8 Critical severity

  Audio Station: Buffer Copy without Checking Size of Input

  CVE-2022-27612Jul 28, 2022Synology

  Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors.