Audio Station vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

AS

Product

Audio Station

by Synology · last CVE Jul 28, 2022

4

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 1High 1Medium 2Low 0

Severity

All severities4 Critical1 High1 Medium2 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Audio Station to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-27612	9.8	1%	Jul 28	Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to… Affected: before 6.5.4-3367
CVE-2022-27611	8.1	1%	Jul 28	Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote… Affected: before 6.5.4-3367
CVE-2017-15888	5.4	1%	Oct 30	Cross-site scripting (XSS) vulnerability in Custom Internet Radio List in Synology Audio Station before 6.3.0-3260 allows remote authenticated attackers to inject arbitrary web… Affected: before 6.3.0-3260
CVE-2015-9104	5.4	1%	Jun 30	Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web… Affected: 5.1-2541; 5.1-2542; 5.1-2547; 5.1-2549; 5.4-2852; 5.4-2853; +1 more