← Vulnerability feed

Vulnerability record · CVE-2023-0142 · published 13 June 2023

CVE-2023-0142: Synology diskstation manager unified controller uncontrolled search path element vulnerability

Synology · Diskstation Manager Unified Controller

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.

8.1 CVSS 3.1 High EPSS 0.97% · top 39.5% CWE-427 · Uncontrolled search path element
8.1CVSS 3.1 base score
0.97%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

Uncontrolled search path element vulnerability in Backup Management functionality in Synology DiskStation Manager (DSM) before 6.2.4-25556-8, 7.0.1-42218-7 and 7.1-42661 allows remote authenticated users with administrator privileges to read or write arbitrary files via unspecified vectors.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.synology.com/en-global/security/advisory/Synology_SA_23_05 Vendor Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_23_06 Vendor Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_23_05 Vendor Advisory
https://www.synology.com/en-global/security/advisory/Synology_SA_23_06 Vendor Advisory

Track CVE-2023-0142 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.8CVE-2021-3156Sudo off-by-one heap overflow allows root privilege escalationSudo before 1.9.5p2 contains an off-by-one error leading to a heap-based buffer overflow. Triggering it via 'sudoedit -s' with a command-line argumen…KEVEPSS 100%analysed10.0CVE-2020-27655Synology router manager improper privilege management vulnerabilityImproper access control vulnerability in Synology Router Manager (SRM) before 1.2.4-8081 allows remote attackers to access restricted resources via i…EPSS 1.8%10.0CVE-2013-6955Synology DSM imageSelector.cgi arbitrary file append and code executionSynology DiskStation Manager (DSM) versions 4.0 before 4.0-2259, 4.2 before 4.2-3243, and 4.3 before 4.3-3810 Update 1 contain a flaw in webman/image…EPSS 85%analysed9.8CVE-2025-13392Synology diskstation manager vulnerabilityImproper check for unusual or exceptional conditions vulnerability in SSO in Synology DiskStation Manager (DSM) before 7.2.2-72806-5 and 7.3.1-86003-…EPSS 0.53%9.8CVE-2024-10441Synology beestation os vulnerabilityImproper encoding or escaping of output vulnerability in the system plugin daemon in Synology BeeStation OS (BSM) before 1.1-65374 and Synology DiskS…EPSS 1.2%9.8CVE-2023-32956Synology router manager vulnerabilityImproper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router Manager …EPSS 1.5%9.8CVE-2023-0077Synology router manager vulnerabilityInteger overflow or wraparound vulnerability in CGI component in Synology Router Manager (SRM) before 1.2.5-8227-6 and 1.3.1-9346-3 allows remote att…EPSS 0.95%9.8CVE-2022-27625Synology diskstation manager memory buffer overflow vulnerabilityA vulnerability regarding improper restriction of operations within the bounds of a memory buffer is found in the message processing functionality of…EPSS 1.6%

Source: NIST National Vulnerability Database (record CVE-2023-0142), CISA KEV, FIRST EPSS (scores of 2026-10-02). This page is refreshed as NVD updates the record.