Vulnerabilities

Admin Takeover Flaw In Synology DiskStation Manager

Malicious News

Oct 20, 2023 — 1 min read

A vulnerability has been identified in Synology's DiskStation Manager (DSM), capable of being exploited to uncover an administrator's password and seize control of the account remotely.

According to Sharon Brizinov from Claroty's Team82 in a report on Tuesday, "Under some rare conditions, an attacker could leak enough information to restore the seed of the pseudorandom number generator (PRNG), reconstruct the admin password, and remotely take over the admin account."

This flaw, labeled CVE-2023-2729, holds a severity rating of 7.5 on the CVSS scoring scale and was addressed by Synology through updates released in June 2023.

The root of the issue lies in the software's utilization of a weak random number generator, relying on the JavaScript Math.random() method to construct the admin password for the network-attached storage (NAS) device.

Sharon Brizinov elaborated on the attack, stating, "By leaking the output of a few Math.Random() generated numbers, we were able to reconstruct the seed for the PRNG and use it to brute-force the admin password. Finally, we were able to use the password to log in to the admin account (after enabling it)."

However, the success of the attack relies on the attacker extracting a few GUIDs during the setup process, generated using the same method. In a real-life scenario, the attacker would first need to leak the GUIDs, brute force the Math.Random state, and gain access to the admin password. Even then, the default setting disables the built-in admin user account, and most users won't enable it.

CISA Emergency Directive to Federal Agencies Regarding Ivanti Zero-Day Exploits

In a recent development, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive on Friday, urging Federal Civilian Executive Branch (FCEB) agencies to implement mitigations against two actively exploited zero-day flaws found in Ivanti Connect Secure (ICS) and Ivanti Policy Secure (IPS) products. The vulnerabilities, namely

How to Boost Your Security with a Password Manager

Introduction Are you tired of keeping track of all your passwords? Do you have trouble remembering which combination goes with what account? Enter the password manager. A password manager is a software program that securely stores and manages all your login information for various websites and applications. With just one

7 Places where malware can hide

Malware can hide in various places on a computer or network. Here are some common locations where malware may hide: 1. System files: Malware can disguise itself as legitimate system files or inject malicious code into existing files. 2. Temporary folders: Malware often uses temporary folders to hide and execute

Trojan Steals Facebook Credentials From Over 300K Android Users

A new Android campaign called Schoolyard Bully has spread to over 300,000 Facebook users. The trojan has been found in applications downloaded from the Google Play store and third-party app stores. Schoolyard Bully disguises itself as an educational application primarily targeting Vietnamese readers. Zimperium Researchers said The trojan uses

Read more

CISA Emergency Directive to Federal Agencies Regarding Ivanti Zero-Day Exploits

How to Boost Your Security with a Password Manager

7 Places where malware can hide

Trojan Steals Facebook Credentials From Over 300K Android Users