← Back to browse · API

CVE-2021-27647

Severity
CRITICAL
CVSS
9.8
EPSS
0.03134
Risk score
40.3
CISA KEV
No
PoC
No
Published
2021-03-12
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2021-14393, GHSA-VWC7-RHXW-HPPQ
Products
Synology:Synology DiskStation Manager (DSM) unspecified <6.2.3-25426-3
Sources
euvd EUVD-2021-14393

Description

Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests.

References