Synology BeeStation OS and DiskStation Manager Improper Certificate Validation Vulnerability Allowing Remote File Writing

A vulnerability exists in the update functionality of Synology BeeStation OS (BSM) versions prior to 1.1-65374 and in Synology DiskStation Manager (DSM) versions prior to 6.2.4-25556-8, 7.1.1-42962-7, 7.2-64570-4 and 7.2.2-72806-1. This vulnerability arises from improper validation of certificates, which allows remote attackers to write limited files through unspecified vectors.

Impact

Exploitation of this vulnerability could lead to unauthorized writing of files on the affected system.

Remediation

Users can upgrade to Synology BeeStation OS version 1.1-65374 or above. For DiskStation Manager, users should upgrade to version 7.2.2-72806-1, 7.2.1-69057-6, 7.2-64570-4, 7.1.1-42962-7 or 6.2.4-25556-8.