Vulnerabilities > Synology > Diskstation Manager Unified Controller > 3.1

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-13	CVE-2023-2729	Unspecified vulnerability in Synology products Use of insufficiently random values vulnerability in User Management Functionality in Synology DiskStation Manager (DSM) before 7.2-64561 allows remote attackers to obtain user credential via unspecified vectors. network low complexity synology	7.5
2023-06-13	CVE-2023-0142	Uncontrolled Search Path Element vulnerability in Synology products Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors. network low complexity synology CWE-427	8.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.