Security Advisory

CVE-2018-13280

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-30 12:00:00
Last updated 2024-09-16 19:40:37
Assigner synology
State PUBLISHED

Description

Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.