description: Command injection vulnerability in smart.cgi in Synology DiskStation Manager (DSM) before 5.2-5967-5 allows remote authenticated users to execute arbitrary commands via disk field.
problem types: Improper Neutralization of Special Elements used in a Command (CWE-77)
affected:
{
product: DiskStation Manager (DSM)
vendor: Synology
versions:
status: affected, version: before 5.2-5967-5
}