Vulnerability Details CVE-2022-27615
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in cgi component in Synology DNS Server before 2.2.2-5027 allows remote authenticated users to delete arbitrary files via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 79.8%
CVSS Severity
CVSS v3 Score 7.7
Products affected by CVE-2022-27615
-
cpe:2.3:a:synology:dns_server:-
-
cpe:2.3:a:synology:dns_server:1.0-0017
-
cpe:2.3:a:synology:dns_server:1.0-0019
-
cpe:2.3:a:synology:dns_server:1.0-0027
-
cpe:2.3:a:synology:dns_server:1.0-0028
-
cpe:2.3:a:synology:dns_server:1.1-0052
-
cpe:2.3:a:synology:dns_server:1.1-0053
-
cpe:2.3:a:synology:dns_server:1.1-0058
-
cpe:2.3:a:synology:dns_server:1.1-0059
-
cpe:2.3:a:synology:dns_server:1.1-0064
-
cpe:2.3:a:synology:dns_server:1.1-0066
-
cpe:2.3:a:synology:dns_server:1.1-0068
-
cpe:2.3:a:synology:dns_server:1.1-0070
-
cpe:2.3:a:synology:dns_server:1.1-0075
-
cpe:2.3:a:synology:dns_server:1.1-0077
-
cpe:2.3:a:synology:dns_server:1.1-0080
-
cpe:2.3:a:synology:dns_server:1.1-0083
-
cpe:2.3:a:synology:dns_server:1.1-0084
-
cpe:2.3:a:synology:dns_server:1.1-0088
-
cpe:2.3:a:synology:dns_server:1.1-0090
-
cpe:2.3:a:synology:dns_server:1.1-0091
-
cpe:2.3:a:synology:dns_server:1.1-0093
-
cpe:2.3:a:synology:dns_server:1.1-0094
-
cpe:2.3:a:synology:dns_server:1.1-0113
-
cpe:2.3:a:synology:dns_server:1.1-0119
-
cpe:2.3:a:synology:dns_server:1.1-0123
-
cpe:2.3:a:synology:dns_server:1.1-0124
-
cpe:2.3:a:synology:dns_server:1.1-0301
-
cpe:2.3:a:synology:dns_server:1.1-0302
-
cpe:2.3:a:synology:dns_server:1.1-0304
-
cpe:2.3:a:synology:dns_server:1.1-0307
-
cpe:2.3:a:synology:dns_server:1.2-1002
-
cpe:2.3:a:synology:dns_server:1.2.0-0129
-
cpe:2.3:a:synology:dns_server:1.2.0-0130
-
cpe:2.3:a:synology:dns_server:2.2.0-3032
-
cpe:2.3:a:synology:dns_server:2.2.1-3042
-
cpe:2.3:a:synology:dns_server:2.2.1-3050
-
cpe:2.3:a:synology:dns_server:2.2.1-3051
-
cpe:2.3:a:synology:dns_server:2.2.1-3062
-
cpe:2.3:a:synology:dns_server:2.2.1-3079
-
cpe:2.3:a:synology:dns_server:2.2.1-5009
-
cpe:2.3:a:synology:dns_server:2.2.1-5010
-
cpe:2.3:a:synology:dns_server:2.2.1-5012
-
cpe:2.3:a:synology:dns_server:2.2.1-5014