Security Advisory
CVE-2017-12075
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Command injection vulnerability in EZ-Internet in Synology DiskStation Manager (DSM) before 6.2-23739 allows remote authenticated users to execute arbitrary command via the username parameter.