CVE-2010-2453

Published Sep 29, 2010

Last updated 6 years ago

Overview

Description: Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted (1) USER or (2) PASS command, which is written by the FTP logging module to a web-interface log window, related to a "web commands injection" issue.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4.3
Impact score: 2.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-79

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.2-0942:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "850A03A9-978D-4A60-90B2-A037023A34C9"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.2-1041:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "121E0EE0-0673-42AB-B7E2-CD6729BE26F1"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.2-1042:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4FB4A66B-FC2F-47A3-8480-695DE2D52979"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.2-1045:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F61AF3A3-09BD-4EE0-95A6-984CD8B1D71B"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.3-1139:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B20EE94-8F9F-45D1-97F1-C429D75E8666"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.3-1141:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DFC7BB6B-C5F5-42F1-B4B6-39B011C3515B"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.3-1144:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F02F59B2-0224-4CF6-AF55-C2A7B0919955"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.3-1157:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D7AADE49-1663-48E9-BEE4-E4FF955FC7F8"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:2.3-1161:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5D469DB1-81A7-4F57-833F-CC796C4391F7"
          },
          {
            "criteria": "cpe:2.3:o:synology:dsm:3.0-1334:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E14D8A0D-1621-4462-B683-8CB45AB24093"
          }
        ],
        "operator": "OR"
      },
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds1010\\+:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "B99359E4-8DFE-4995-9893-CCA6CEB4B8F9"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds109:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "68BC068B-16C8-4B4F-9851-4B5293FAEF68"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds110\\+:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1166EF93-847B-4D97-BE07-A6DE16B5E2A7"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds110j:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "14FF9E89-018F-4726-BBA3-4ADD1E73F021"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds209:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "1B3B3E5F-7F93-424C-842D-6D9A793972F9"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds210\\+:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "4719A127-3E49-4B74-AECB-023D17DB0528"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds210j:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "10F66242-CE8F-4569-97CF-63312CC2D358"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds409slim:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "294CBF5E-AB11-42A1-9466-B62224CE976F"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds410:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "CDF651B4-C186-40B5-8F76-9CD1983E919E"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds410j:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "29EFF4D3-362B-40A2-8DEC-3BD20D2859F1"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds411\\+:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "AC21A0D4-CB0F-4336-AF71-1DFE1DFDDE28"
          },
          {
            "criteria": "cpe:2.3:h:synology:disk_station_ds710\\+:*:*:*:*:*:*:*:*",
            "vulnerable": false,
            "matchCriteriaId": "5C4D1826-8C3B-4789-A6AD-B5FCF9980936"
          }
        ],
        "operator": "OR"
      }
    ],
    "operator": "AND"
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References