1. Home
  2. CVE Database
  3. CVE-2010-2453
MEDIUM · 4.3

CVE-2010-2453

Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and pr...

Vulnerability Description

Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted (1) USER or (2) PASS command, which is written by the FTP logging module to a web-interface log window, related to a "web commands injection" issue.

CVSS Score

4.3

MEDIUM

AV:N/AC:M/Au:N/C:N/I:P/A:N
Confidentiality
NONE
Integrity
PARTIAL
Availability
NONE

Affected Products

VendorProductVersions
SynologyDsm2.2-0942
SynologyDisk Station Ds1010\+All versions
SynologyDisk Station Ds109All versions
SynologyDisk Station Ds110\+All versions
SynologyDisk Station Ds110JAll versions
SynologyDisk Station Ds209All versions
SynologyDisk Station Ds210\+All versions
SynologyDisk Station Ds210JAll versions
SynologyDisk Station Ds409SlimAll versions
SynologyDisk Station Ds410All versions
SynologyDisk Station Ds410JAll versions
SynologyDisk Station Ds411\+All versions
SynologyDisk Station Ds710\+All versions

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2010-2453?

CVE-2010-2453 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and pr...

How severe is CVE-2010-2453?

CVE-2010-2453 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2010-2453?

Check the references section above for vendor advisories and patch information. Affected products include: Synology Dsm, Synology Disk Station Ds1010\+, Synology Disk Station Ds109, Synology Disk Station Ds110\+, Synology Disk Station Ds110J.