📦

audio_station

Vendor: synology

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 37 Total Indexed
Avg. EPSS 0.88% Exploit Prob.
Latest CVE CVE-2022-27611 Jul 28

Security Vulnerability Index

Page 1 / 4
5.4 CVSS
CVE-2022-27611

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Audio Station before 6.5.4-3367 allows remote authenticated users to delete arbitrary files via unspecified vectors.

EPSS: 0.89%
7.3 CVSS
CVE-2022-27612
RCE

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology Audio Station before 6.5.4-3367 allows remote attackers to execute arbitrary commands via unspecified vectors.

EPSS: 0.78%
5.4 CVSS
CVE-2017-15888

Cross-site scripting (XSS) vulnerability in Custom Internet Radio List in Synology Audio Station before 6.3.0-3260 allows remote authenticated attackers to inject arbitrary web script or HTML via the NAME parameter.

EPSS: 1.23%
5.4 CVSS
CVE-2015-9104

Cross-site scripting (XSS) vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title.

EPSS: 0.61%