CVE-2021-34809

Improper neutralization of special elements used in a command (‘Command Injection’) vulnerability in task management component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Date published : 2021-06-17

https://www.synology.com/security/advisory/Synology_SA_21_11