CVE-2022-43931

Critical · 10.0

CVSS

10.0

EPSS

16.8%

Published

Jan 3, 2023

CISA due date

—

The record

Out-of-bounds write vulnerability in Remote Desktop Functionality in Synology VPN Plus Server before 1.4.3-0534 and 1.4.4-0635 allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected packages

Ecosystem	Package	Introduced	Fixed