Vulnerability · Published Oct 26, 2022 · Assigned by synology
CVE-2022-43749
Medium 4.3
In plain English
A medium-severity privilege mismanagement in Presto File Server from Synology. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.7%top 45.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper privilege management vulnerability in summary report management in Synology Presto File Server before 2.1.2-1601 allows remote authenticated users to bypass security constraint via unspecified vectors.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Synology | Presto File Server | unspecified – before 2.1.2-1601 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N