Synology stale DNS allows practical interception of traffic from vulnerable DSM clients

Posted by shed riot on Jul 22

# Synology stale DNS allows practical interception of traffic from

vulnerable DSM clients



Vendor case: 904909

Suggested severity: High



## Customer advisory



Synology customers using the affected DSM and Relayd versions listed below

should upgrade immediately.



The relevant man-in-the-middle vulnerabilities were fixed in DSM

6.2.3-25426 Update 3. Customers should install the latest DSM version

available for their device, and in no case remain on...