1. Home
  2. CVE Database
  3. CVE-2022-27612
HIGH · 7.3

CVE-2022-27612

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands ...

Vulnerability Description

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
SynologyAudio Station< 6.5.4-3367

Related Weaknesses (CWE)

CWE-120

References

FAQ

What is CVE-2022-27612?

CVE-2022-27612 is a vulnerability with a CVSS score of 7.3 (HIGH). Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands ...

How severe is CVE-2022-27612?

CVE-2022-27612 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-27612?

Check the references section above for vendor advisories and patch information. Affected products include: Synology Audio Station.