Synology Security Advisory SA-25:07 on Resolved Vunerability on SMB Service

Synology, Inc. had published a security advisory concerning Server Message Block (SMB) service for its NAS.

Publish Time: 2025-05-29 16:40:13 UTC+8
Last Updated: 2025-05-29 16:40:43 UTC+8
Severity: Moderate
Status: Resolved

Abstract
A vulnerability allows remote authenticated users to write to limited files via Server Message Block (SMB) service.

Affected Products

Mitigation: None

Detail

• CVE-2025-5293
  • Severity: Moderate
  • CVSS3 Base Score: 4.3
  • CVSS3 Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
  • ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

Acknowledgement: David Oxley

Revision