Intrusion PreventionSynology.DSM.Video.Station.XSS
Description
This indicates an attack attempt against multiple Cross-Site Scripting (XSS) vulnerabilities in Synology DiskStation Manager (DSM) Video Station.
The vulnerability is due to an error in the application when handling malformed inputs. An attacker can exploit this to execute arbitrary script code within context of the target users browser.
Affected Products
Video Station version 1.5-0770
Other versions may be affected too
Impact
System Compromise: Remote attackers can execute arbitrary script code within the context of the target users browser
Recommended Actions
Apply the most recent upgrade or patch from the vendor.
https://www.synology.com/en-us/dsm
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 43548 |
| Created | Jan 10, 2017 |
| Updated | Dec 12, 2022 |
| Risk |
|
| CVE ID | CVE-2015-9105 |
| Exploit Prediction Score | 0.07% |
| Default Action | drop |
| Active | |
| Affected OS | Linux |
| Affected App | Other |