Vulnerability Details CVE-2022-49036
An inclusion of functionality from untrusted control sphere vulnerability in OpenSSL configuration in Synology Active Backup for Business Recovery Media Creator before 2.5.0-2081 allows local users to execute arbitrary code via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 2.4%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-49036
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.0.3-0023
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.0.4-0064
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.1.0-0436
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.1.0-0444
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.1.1-0575
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.1.1-0576
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.2.0-1520
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.2.0-1524
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.3.0-1603
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.4.0-1684
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.4.1-1771
-
cpe:2.3:a:synology:active_backup_for_business_recovery_media_creator:2.4.2-1789