Security Advisory

CVE-2018-13280

7.4
HIGH

Vulnerability Description

Use of insufficiently random values vulnerability in SYNO.Encryption.GenRandomKey in Synology DiskStation Manager (DSM) before 6.2-23739 allows man-in-the-middle attackers to compromise non-HTTPS sessions via unspecified vectors.
Published Date July 30, 2018
Official Source NIST NVD Advisory