{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Drive Server pour DSM 7.2.1 versions ant\u00e9rieures \u00e0 3.5.0-26085",
      "product": {
        "name": "Drive Server pour DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "DSM versions 7.2.1.x ant\u00e9rieures \u00e0 7.2.1-69057-6",
      "product": {
        "name": "DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "Replication Service pour DSM 7.1 versions ant\u00e9rieures \u00e0 1.2.2-0353",
      "product": {
        "name": "Replication Service pour DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "Drive Server pour DSM 7.1 versions ant\u00e9rieures \u00e0 3.2.1-23280",
      "product": {
        "name": "Drive Server pour DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "Replication Service pour DSM 7.2 versions ant\u00e9rieures \u00e0 1.3.0-0423",
      "product": {
        "name": "Replication Service pour DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "Drive Server pour DSM 7.2.2 versions ant\u00e9rieures \u00e0 3.5.1-26102",
      "product": {
        "name": "Drive Server pour DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "BeeStation OS versions 1.x ant\u00e9rieures \u00e0 1.1-65374",
      "product": {
        "name": "BeeStation OS",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "DSMUC versions 3.1.x",
      "product": {
        "name": "DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "DSM versions 7.1.x",
      "product": {
        "name": "DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    },
    {
      "description": "DSM versions 7.2.2.x ant\u00e9rieures \u00e0 7.2.2-72806-1",
      "product": {
        "name": "DSM",
        "vendor": {
          "name": "Synology",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "L\u0027\u00e9diteur indique que les versions correctives pour DSMUC et DSM 7.1 seront publi\u00e9es sous 30 jours.",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [],
  "initial_release_date": "2024-11-12T00:00:00",
  "last_revision_date": "2024-11-12T00:00:00",
  "links": [],
  "reference": "CERTFR-2024-AVI-0960",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2024-11-12T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
    },
    {
      "description": "Ex\u00e9cution de code arbitraire"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    },
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Synology. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es et une atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Synology",
  "vendor_advisories": [
    {
      "published_at": "2024-11-26",
      "title": "Bulletin de s\u00e9curit\u00e9 Synology Synology_SA_24_20",
      "url": "https://www.synology.com/fr-fr/security/advisory/Synology_SA_24_20"
    },
    {
      "published_at": "2024-11-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Synology Synology_SA_24_22",
      "url": "https://www.synology.com/fr-fr/security/advisory/Synology_SA_24_22"
    },
    {
      "published_at": "2024-11-05",
      "title": "Bulletin de s\u00e9curit\u00e9 Synology Synology_SA_24_23",
      "url": "https://www.synology.com/fr-fr/security/advisory/Synology_SA_24_23"
    },
    {
      "published_at": "2024-11-08",
      "title": "Bulletin de s\u00e9curit\u00e9 Synology Synology_SA_24_21",
      "url": "https://www.synology.com/fr-fr/security/advisory/Synology_SA_24_21"
    }
  ]
}